Lucene search

K
f5F5SOL8578
HistoryApr 23, 2008 - 12:00 a.m.

SOL8578 - Security Advisory: BIND buffer overflow in inet_network CVE-2008-0122

2008-04-2300:00:00
support.f5.com
38

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

85.6%

An off-by-one error in the inet_network()function in libbind could lead to memory corruption with certain inputs.libbindhas a vulnerability in theinet_network API. However, this API is not used by any F5 products that use the affected version of BIND.

Information about this advisory is available at the following location:

<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0122&gt;

F5 Product Development is tracking this issue as CR92595.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

85.6%