CVE-2016-2225

2017-03-2415:59:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet.

CPENameOperatorVersion
uclibc-ngeq1.0.6
uclibc-ngeq1.0.5
uclibc-ngeq1.0.9
uclibc-ngeq1.0.10
uclibc-ngeq1.0.1
uclibc-ngeq1.0.2
uclibc-ngeq1.0.11
uclibc-ngeq1.0.7
uclibc-ngeq1.0.0
uclibc-ngeq1.0.4

Name	Operator	Version
uclibc-ng	eq	1.0.6
uclibc-ng	eq	1.0.5
uclibc-ng	eq	1.0.9
uclibc-ng	eq	1.0.10
uclibc-ng	eq	1.0.1
uclibc-ng	eq	1.0.2
uclibc-ng	eq	1.0.11
uclibc-ng	eq	1.0.7
uclibc-ng	eq	1.0.0
uclibc-ng	eq	1.0.4