Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-9454
HistoryAug 18, 2017 - 2:29 p.m.

CVE-2017-9454

2017-08-1814:29:00
CWE-125
[email protected]
web.nvd.nist.gov
16
cve-2017-9454
buffer overflow
ares_parse_a_reply
resiprocate
denial of service
out-of-bounds-read

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

61.6%

JSON

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

Affected configurations

NVD
Node
resiprocateresiprocateRange≤1.10.2
OR
resiprocateresiprocateMatch1.11.0alpha1
OR
resiprocateresiprocateMatch1.11.0alpha10
OR
resiprocateresiprocateMatch1.11.0alpha11
OR
resiprocateresiprocateMatch1.11.0alpha2
OR
resiprocateresiprocateMatch1.11.0alpha3
OR
resiprocateresiprocateMatch1.11.0alpha4
OR
resiprocateresiprocateMatch1.11.0alpha5
OR
resiprocateresiprocateMatch1.11.0alpha6
OR
resiprocateresiprocateMatch1.11.0alpha7
OR
resiprocateresiprocateMatch1.11.0alpha8
OR
resiprocateresiprocateMatch1.11.0alpha9
OR
resiprocateresiprocateMatch1.11.0beta1
OR
resiprocateresiprocateMatch1.11.0beta2
OR
resiprocateresiprocateMatch1.11.0beta3
OR
resiprocateresiprocateMatch1.11.0beta4
OR
resiprocateresiprocateMatch1.11.0beta5
OR
resiprocateresiprocateMatch1.12.0alpha1
OR
resiprocateresiprocateMatch1.12.0beta1
OR
resiprocateresiprocateMatch1.12.0beta2
OR
resiprocateresiprocateMatch1.12.0beta3
OR
resiprocateresiprocateMatch1.12.0beta4
OR
resiprocateresiprocateMatch1.12.0beta5
OR
resiprocateresiprocateMatch1.12.0beta6
OR
resiprocateresiprocateMatch1.12.0beta7
OR
resiprocateresiprocateMatch1.12.0beta8
OR
resiprocateresiprocateMatch1.12.0beta9

Related

veracode 1
osv 1
cvelist 1
prion 1
debiancve 1
ubuntucve 1
nvd 1
veracode
veracode
Denial Of Service (DoS)
2021-07-13 06:25:12
osv
osv
CVE-2017-9454
2017-08-18 14:29:00
cvelist
cvelist
CVE-2017-9454
2017-08-18 14:00:00
prion
prion
Buffer overflow
2017-08-18 14:29:00
debiancve
debiancve
CVE-2017-9454
2017-08-18 14:29:00
ubuntucve
ubuntucve
CVE-2017-9454
2017-08-18 00:00:00
nvd
nvd
CVE-2017-9454
2017-08-18 14:29:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

61.6%

JSON
Related for CVE-2017-9454
veracode1osv1cvelist1prion1debiancve1ubuntucve1nvd1