DNS attack in mitmproxy - CVE-2018-14505

Vulnerability identifier: #VU14310

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-14505

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to conduct DNS attack.

The weakness exists due to insufficient protection against DNS rebinding in the mitmweb interface. A remote attacker can create a specially crafted website, set the scripts config option, gain access to the sniffed data or run arbitrary Python scripts on the filesystem to manipulate DNS information.

mitmproxy
Opensuse

Update to version 4.0.4.

mitmproxy - update to 4.0.4

• https://github.com/mitmproxy/mitmproxy/issues/3234

• DNS attack in mitmproxy
• OpenSUSE Linux update for python-mitmproxy