CVE-2017-9454

2017-08-1814:00:00

mitre

www.cve.org

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

References

github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df

list.resiprocate.org/archive/resiprocate-users/msg02700.html