Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jr2-6c89-rmhp

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.

EPSS

Процентиль: 98%
0.23633
Средний

7.5 High

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 9 лет назад

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.

CVSS3: 7.5
redhat
почти 9 лет назад

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.

CVSS3: 7.5
nvd
почти 9 лет назад

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.

CVSS3: 7.5
debian
почти 9 лет назад

In systemd 223 through 235, a remote DNS server can respond with a cus ...

suse-cvrf
больше 8 лет назад

Security update for systemd

EPSS

Процентиль: 98%
0.23633
Средний

7.5 High

CVSS3

Дефекты

CWE-835