Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-8804

Опубликовано: 07 мая 2017
Источник: nvd
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:glibc:2.25:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.03759
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 8 лет назад

The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references

CVSS3: 7.5
redhat
больше 8 лет назад

The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references

CVSS3: 7.5
debian
больше 8 лет назад

The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc ...

CVSS3: 7.5
github
больше 3 лет назад

** DISPUTED ** The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references]

fstec
почти 9 лет назад

Уязвимость функции xdr_bytes и xdr_string библиотеки, обеспечивающей системные вызовы и основные функции glibc, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 88%
0.03759
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-502