Lucene search

K
vulnrichmentVulDBVULNRICHMENT:CVE-2017-20016
HistoryMar 28, 2022 - 8:46 p.m.

CVE-2017-20016 WEKA INTEREST Security Scanner Portscan memory allocation

2022-03-2820:46:00
CWE-789
VulDB
github.com
6
weka interest security scanner
vulnerability
denial of service
portscan
memory allocation

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

7

Confidence

High

EPSS

0.008

Percentile

81.3%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the component Portscan. The manipulation with an unknown input leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:weka:interest_security_scanner:1.8:*:*:*:*:*:*:*"
    ],
    "vendor": "weka",
    "product": "interest_security_scanner",
    "versions": [
      {
        "status": "affected",
        "version": "1.8"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

7

Confidence

High

EPSS

0.008

Percentile

81.3%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

Related for VULNRICHMENT:CVE-2017-20016