Skip to content
OpenAdvisories

Weakness (CWE)

CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action

Variant Draft

The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Use other means of identity verification that cannot be simply spoofed. Possibilities include a username/password or certificate.

  2. Implementation

    Perform proper forward and reverse DNS lookups to detect DNS spoofing.

Source: MITRE CWE-350

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-42559 Public exploit

    RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious publ…

    modelcontextprotocol rust-sdk rmcp dynoxide-rs npm crates.io
  • High 8.8
    CVE-2023-52235 Public exploit

    SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow…