Lucene search

Veracode Vulnerability DatabaseVERACODE:19184

HistoryMay 16, 2019 - 2:50 a.m.

Denial Of Service (DoS)

2019-05-1602:50:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

glibc is vulnerable to denial of service attacks. A remote unauthenticated attacker could cause denial of service conditions due to NULL pointer dereference and process crash. Affected by this issue is the function res_query of the component libresolv.

CPENameOperatorVersion
glibceq2.17__157.el7_3.2
glibceq2.17__157.el7_3.1
glibceq2.17__196.el7_4.2
glibceq2.17__157.el7_3.4
glibceq2.17__157.el7_3.5
glibceq2.17__196.el7
glibceq2.17__157.el7_3.2
glibceq2.17__157.el7_3.1
glibceq2.17__196.el7_4.2
glibceq2.17__157.el7_3.4

Name	Operator	Version
glibc	eq	2.17__157.el7_3.2
glibc	eq	2.17__157.el7_3.1
glibc	eq	2.17__196.el7_4.2
glibc	eq	2.17__157.el7_3.4
glibc	eq	2.17__157.el7_3.5
glibc	eq	2.17__196.el7
glibc	eq	2.17__157.el7_3.2
glibc	eq	2.17__157.el7_3.1
glibc	eq	2.17__196.el7_4.2
glibc	eq	2.17__157.el7_3.4

Rows per page:

1-10 of 121

References

www.securityfocus.com/bid/99324

www.ubuntu.com/usn/USN-3239-1

www.ubuntu.com/usn/USN-3239-2

access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html

access.redhat.com/errata/RHSA-2018:0805

access.redhat.com/security/cve/CVE-2015-5180

access.redhat.com/security/updates/classification/#moderate

bugzilla.redhat.com/show_bug.cgi?id=1249603

bugzilla.redhat.com/show_bug.cgi?id=1348000

bugzilla.redhat.com/show_bug.cgi?id=1349962

bugzilla.redhat.com/show_bug.cgi?id=1349964

bugzilla.redhat.com/show_bug.cgi?id=1372305

bugzilla.redhat.com/show_bug.cgi?id=1398413

bugzilla.redhat.com/show_bug.cgi?id=1432085

bugzilla.redhat.com/show_bug.cgi?id=1435615

bugzilla.redhat.com/show_bug.cgi?id=1440250

bugzilla.redhat.com/show_bug.cgi?id=1443236

bugzilla.redhat.com/show_bug.cgi?id=1445644

bugzilla.redhat.com/show_bug.cgi?id=1445781

bugzilla.redhat.com/show_bug.cgi?id=1447556

bugzilla.redhat.com/show_bug.cgi?id=1448822

bugzilla.redhat.com/show_bug.cgi?id=1452034

bugzilla.redhat.com/show_bug.cgi?id=1463692

bugzilla.redhat.com/show_bug.cgi?id=1468807

bugzilla.redhat.com/show_bug.cgi?id=1471111

bugzilla.redhat.com/show_bug.cgi?id=1482988

bugzilla.redhat.com/show_bug.cgi?id=1484034

bugzilla.redhat.com/show_bug.cgi?id=1508895

bugzilla.redhat.com/show_bug.cgi?id=1527904

bugzilla.redhat.com/show_bug.cgi?id=1528418

bugzilla.redhat.com/show_bug.cgi?id=1529982

bugzilla.redhat.com/show_bug.cgi?id=677316

security.gentoo.org/glsa/201706-19

sourceware.org/bugzilla/attachment.cgi?id=8492

sourceware.org/bugzilla/show_bug.cgi?id=18784

sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=fc82b0a2dfe7dbd35671c10510a8da1043d746a5

sourceware.org/git/gitweb.cgi?p=glibc.git;h=fc82b0a2dfe7dbd35671c10510a8da1043d746a5

sourceware.org/ml/libc-alpha/2017-02/msg00079.html

www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

Related for VERACODE:19184