Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4rm5-v8f4-mx8v

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

EPSS

Процентиль: 96%
0.22157
Средний

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 11 лет назад

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

redhat
около 11 лет назад

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

nvd
около 11 лет назад

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

debian
около 11 лет назад

The internal DNS server in Samba 4.x before 4.0.18 does not check the ...

CVSS3: 7.5
fstec
около 11 лет назад

Уязвимость программного обеспечения Samba, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации

EPSS

Процентиль: 96%
0.22157
Средний

Дефекты

CWE-20