CVE-2017-9454

Опубликовано: 18 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

Ссылки

https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df
Patch
Third Party Advisory
https://list.resiprocate.org/archive/resiprocate-users/msg02700.html
Vendor Advisory
https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df
Patch
Third Party Advisory
https://list.resiprocate.org/archive/resiprocate-users/msg02700.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:resiprocate:resiprocate:*:*:*:*:*:*:*:*

Версия до 1.10.2 (включая)

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha10:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha11:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha3:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha4:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha5:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha6:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha7:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha8:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:alpha9:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta1:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta2:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta3:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta4:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.11.0:beta5:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta1:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta2:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta3:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta4:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta5:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta6:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta7:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta8:*:*:*:*:*:*

cpe:2.3:a:resiprocate:resiprocate:1.12.0:beta9:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00786

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2017-9454

CVSS3: 7.5

ubuntu

больше 8 лет назад

CVE-2017-9454

CVSS3: 7.5

debian

больше 8 лет назад

Buffer overflow in the ares_parse_a_reply function in the embedded are ...

GHSA-hgqf-qr3f-rgx9

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 73%

0.00786

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125