CVE-2017-16100

Published June 7th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

10

HIGH

Affected

1

PROJECT

Description

dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.

skoranga/node-dns-sync

Sync version of DNS lookup. Useful for server startup activities.

GitHub

7