Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2013-7423

Опубликовано: 24 фев. 2015
Источник: ubuntu
Приоритет: medium
CVSS2: 5

Описание

The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

2.19-0ubuntu6.6
lucid

released

2.11.1-0ubuntu7.21
precise

released

2.15-0ubuntu10.11
trusty

released

2.19-0ubuntu6.6
trusty/esm

not-affected

2.19-0ubuntu6.6
upstream

needs-triage

utopic

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

2.19-15ubuntu1
esm-infra-legacy/trusty

DNE

lucid

DNE

precise

DNE

trusty

DNE

trusty/esm

DNE

upstream

needs-triage

utopic

not-affected

2.19-10ubuntu2.2

Показывать по

5 Medium

CVSS2

Связанные уязвимости

redhat
почти 12 лет назад

The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.

nvd
больше 10 лет назад

The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.

debian
больше 10 лет назад

The send_dg function in resolv/res_send.c in GNU C Library (aka glibc ...

github
около 3 лет назад

The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.

oracle-oval
около 10 лет назад

ELSA-2015-0863: glibc security and bug fix update (MODERATE)

5 Medium

CVSS2