[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7cnLJd00zJozWmKqs6E2NHltnRq6hAGIKlWAZQr20C0":3,"g5a-risk:CVE-2018-21029":149},{"success":4,"data":5,"meta":147},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":91,"weaknesses":92,"weaknessesCount":101,"isActivelyExploited":102,"cisaInfo":27,"otxData":27,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":145,"notableEvents":146},"CVE-2018-21029","What is CVE-2018-21029?","systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)","systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and the...","2019-10-30T22:15:10.667","2024-08-05T13:15:42.597",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.03138,[39,39,39,39,39,39,39],"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"systemd_project","systemd","*","cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"fedoraproject","fedora","31","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",2,[55,60,65,68,72,76,79,83,87],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fblog.cloudflare.com\u002Fdns-encryption-explained\u002F","Cloudflare",[59],"Third Party Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fgithub.com\u002Fsystemd\u002Fsystemd\u002Fblob\u002Fv239\u002Fman\u002Fresolved.conf.xml#L199-L207","GitHub",[64,59],"Exploit",{"url":66,"source":62,"tags":67},"https:\u002F\u002Fgithub.com\u002Fsystemd\u002Fsystemd\u002Fblob\u002Fv243\u002Fman\u002Fresolved.conf.xml#L196-L207",[64,59],{"url":69,"source":62,"tags":70},"https:\u002F\u002Fgithub.com\u002Fsystemd\u002Fsystemd\u002Fblob\u002Fv243\u002Fsrc\u002Fresolve\u002Fresolved-dnstls-gnutls.c#L62-L63",[71,59],"Patch",{"url":73,"source":62,"tags":74},"https:\u002F\u002Fgithub.com\u002Fsystemd\u002Fsystemd\u002Fissues\u002F9397",[75,59],"Issue Tracking",{"url":77,"source":62,"tags":78},"https:\u002F\u002Fgithub.com\u002Fsystemd\u002Fsystemd\u002Fpull\u002F13870",[71,59],{"url":80,"source":81,"tags":82},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F4NLJVOJMB6ANDILRLDZK26YGLYBEPHKY\u002F","Fedoraproject",[],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20191122-0002\u002F","Netapp",[59],{"url":88,"source":89,"tags":90},"https:\u002F\u002Ftools.ietf.org\u002Fhtml\u002Frfc7858#section-4.1","Ietf",[59],9,[93],{"id":94,"name":95,"description":96,"extendedDescription":97,"status":98,"abstraction":99,"structure":100},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2018-21029? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-21029, a critical severity cyber security vulnerability from 2019. systemd 239 through 245 accepts any certificate signed ...","CVE-2018-21029, CVE-2018-21029 vulnerability, CVE-2018-21029 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, systemd_project security, fedoraproject security, systemd vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2018-21029",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-21029","Cybersecurity","CVE-2018-21029, CVE-2018-21029 vulnerability, CVE-2018-21029 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130,139],{"Operator":27,"Negate":27,"Nodes":131},[132],{"Operator":133,"Negate":27,"CPEMatch":134},"OR",[135],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":137,"VersionEndExcluding":138,"VersionEndIncluding":27},"6A177E47-87C0-4499-8DE8-3F7C75FF4FEE","239","244",{"Operator":27,"Negate":27,"Nodes":140},[141],{"Operator":133,"Negate":27,"CPEMatch":142},[143],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80F0FA5D-8D3B-4C0E-81E2-87998286AF33",[],[],{"lastModified":11,"cacheTime":148,"version":33},1792238291660,{"score":150,"band":151,"action":152,"scoredAt":153},55,"Medium","Plan remediation","2026-10-16T06:47:09.404055+00:00"]