CVE-2017-9732

Опубликовано: 20 дек. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploited remotely without authentication, possibly affecting another services running on the targeted host.

Ссылки

http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html
Exploit
Patch
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Nov/65
Exploit
Mailing List
Patch
Third Party Advisory
https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1
Patch
Third Party Advisory
https://github.com/irsl/knc-memory-exhaustion/
Exploit
Patch
Third Party Advisory
http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html
Exploit
Patch
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2018/Nov/65
Exploit
Mailing List
Patch
Third Party Advisory
https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1
Patch
Third Party Advisory
https://github.com/irsl/knc-memory-exhaustion/
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:secure-endpoints:kerberised_netcat:*:*:*:*:*:*:*:*

Версия до 1.11-1 (исключая)

EPSS

Процентиль: 89%

0.04524

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

GHSA-wmpq-8mxr-7pxx