Lucene search

K
archlinuxArch LinuxASA-201508-7
HistoryAug 16, 2015 - 12:00 a.m.

glibc: denial of service

2015-08-1600:00:00
Arch Linux
lists.archlinux.org
16

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

86.0%

It was found that the files backend of Name Service Switch (NSS) did not
isolate iteration over an entire database from key-based look-up API
calls. An application performing look-ups on a database while iterating
over it could enter an infinite loop, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
anyanyanyglibc< 2.22-1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

86.0%