mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py. (CVE-2018-14505)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py. (CVE-2018-14505)

This update for python-mitmproxy fixes the following issues :

The following security vulnerability was fixed :

  - CVE-2018-14505: Fixed multiple DNS rebinding attacks     related to tools/web/app.py (boo#1102178)

The following other issue was fixed :

  - Fixed a dependency issue with python-ldap3 (boo#1101457)

ID	Name	Product	Family	Type	Severity
259513	Linux Distros Unpatched Vulnerability : CVE-2018-14505	Nessus	Misc.	Local	high
423430	SCA: security update for mitmproxy (GHSA-6m53-c78q-7qmg)	Tenable Cloud Security	SCA Checks	Local	critical
423430	SCA: security update for mitmproxy (GHSA-6m53-c78q-7qmg)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
123252	openSUSE Security Update : python-mitmproxy (openSUSE-2019-581)	Nessus	SuSE Local Security Checks	Local	high
111631	openSUSE Security Update : python-mitmproxy (openSUSE-2018-850)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2018-14505

critical

Tenable Plugins

high

critical

critical

high

high