Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-0239
HistoryMay 28, 2014 - 4:58 a.m.

Design/Logic Flaw

2014-05-2804:58:00
PRIOn knowledge base
www.prio-n.com
4

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.374 Low

EPSS

Percentile

97.1%

JSON

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

CPENameOperatorVersion
sambage4.1.0
sambalt4.1.8
sambage4.0.0
sambalt4.0.18

Related

cve 3
ubuntucve 2
debiancve 2
ics 1
nessus 12
openvas 9
checkpoint_advisories 1
freebsd 1
samba 1
altlinux 3
ubuntu 1
securityvulns 2
slackware 1
gentoo 1
cve
cve
CVE-2014-0239
2014-05-28 04:58:00
CVE-1999-0103
1996-02-08 05:00:00
CVE-2002-2443
2013-05-29 14:29:00
ubuntucve
ubuntucve
CVE-2014-0239
2014-05-28 00:00:00
CVE-2002-2443
2013-05-10 00:00:00
debiancve
debiancve
CVE-2014-0239
2014-05-28 04:58:00
CVE-2002-2443
2013-05-29 14:29:00
ics
ics
Philips IntelliVue Information Center iX (Update B)
2018-10-11 12:00:00
nessus
nessus
Chargen UDP Service Remote DoS
1999-11-29 00:00:00
Quote of the Day (QOTD) Service Detection
1999-11-30 00:00:00
Echo Service Detection
1999-06-22 00:00:00
openvas
openvas
Check for Quote of the Day (qotd) Service (TCP)
2005-11-03 00:00:00
Check for Quote of the Day (qotd) Service (UDP)
2005-11-03 00:00:00
Check for Chargen Service (UDP)
2005-11-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Samba DNS Reply Flag Denial of Service (CVE-2014-0239)
2014-08-03 00:00:00
freebsd
freebsd
krb5 -- UDP ping-pong vulnerability in the kpasswd (password changing) service. [CVE-2002-2443]
2013-05-10 00:00:00
samba
samba
Potential DOS in Samba internal DNS server
2014-06-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.1.8-alt1
2014-06-04 00:00:00
Security fix for the ALT Linux 8 package samba version 4.1.8-alt1
2014-06-04 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.1.8-alt1
2014-06-04 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2014-06-26 00:00:00
securityvulns
securityvulns
[slackware-security] samba (SSA:2014-175-04)
2014-06-26 00:00:00
Samba multiple security vulnerabilities
2014-06-26 00:00:00
slackware
slackware
[slackware-security] samba
2014-06-24 23:47:25
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.374 Low

EPSS

Percentile

97.1%

JSON
Related for PRION:CVE-2014-0239
cve3ubuntucve2debiancve2ics1nessus12openvas9checkpoint_advisories1freebsd1samba1altlinux3ubuntu1securityvulns2slackware1gentoo1