CVE-2024-25638

HIGH

dnsjava <3.6.0 - DNS Response Record Validation Bypass

Title source: manual
STIX 2.1

Description

dnsjava is an implementation of DNS in Java. Records in DNS replies are not checked for their relevance to the query, allowing an attacker to respond with RRs from different zones. This vulnerability is fixed in 3.6.0.

References (3)

Core 3

Scores

CVSS v3 8.9
EPSS 0.0039
EPSS Percentile 30.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-345 CWE-349
Status published
Products (2)
dnsjava/dnsjava 0 - 3.6.0Maven
dnsjava/dnsjava < 3.6.0
Published Jul 22, 2024
Tracked Since Feb 18, 2026