CVE-2003-0696

Опубликовано: 20 янв. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion).

Ссылки

http://www.securityfocus.com/bid/8738
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13328
https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true
http://www.securityfocus.com/bid/8738
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13328
https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*

cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00543

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2qr9-mgp2-258p

github

почти 4 года назад