Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-8702

Опубликовано: 12 апр. 2016
Источник: nvd
CVSS3: 8.6
CVSS2: 7.8
EPSS Низкий

Описание

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*
Версия до 2.0.18 (включая)

EPSS

Процентиль: 73%
0.00756
Низкий

8.6 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.6
ubuntu
почти 10 лет назад

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.

CVSS3: 8.6
debian
почти 10 лет назад

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allow ...

CVSS3: 8.6
github
больше 3 лет назад

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.

EPSS

Процентиль: 73%
0.00756
Низкий

8.6 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20