CVE-2017-9454

2017-08-1814:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

CPENameOperatorVersion
resiprocateeqresiprocate-1.10.0_beta1
resiprocateeqresiprocate-1.11.0_alpha1
resiprocateeqresiprocate-1.11.0_alpha7
resiprocateeqresiprocate-1.11.0_alpha8
resiprocateeqresiprocate-1.11.0_alpha6
resiprocateeqresiprocate-1.11.0_beta3
resiprocateeqresiprocate-1.11.0_alpha2
resiprocateeqresiprocate-1.11.0_alpha9
resiprocateeqresiprocate-1.10.0_beta2
resiprocateeqresiprocate-1.11.0_alpha11

Name	Operator	Version
resiprocate	eq	resiprocate-1.10.0_beta1
resiprocate	eq	resiprocate-1.11.0_alpha1
resiprocate	eq	resiprocate-1.11.0_alpha7
resiprocate	eq	resiprocate-1.11.0_alpha8
resiprocate	eq	resiprocate-1.11.0_alpha6
resiprocate	eq	resiprocate-1.11.0_beta3
resiprocate	eq	resiprocate-1.11.0_alpha2
resiprocate	eq	resiprocate-1.11.0_alpha9
resiprocate	eq	resiprocate-1.10.0_beta2
resiprocate	eq	resiprocate-1.11.0_alpha11