Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-2909

Опубликовано: 07 нояб. 2017
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cesanta:mongoose:6.8:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00368
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 8 лет назад

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.

CVSS3: 7.5
debian
около 8 лет назад

An infinite loop programming error exists in the DNS server functional ...

CVSS3: 7.5
github
больше 3 лет назад

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.

EPSS

Процентиль: 58%
0.00368
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-835