high7.5
CVE-2017-9454
Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of servi…
Impact
Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Resiprocate | Resiprocate | through 1.10.2 Versions 1.11.0, 1.12.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df
- https://list.resiprocate.org/archive/resiprocate-users/msg02700.html
- https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df
- https://list.resiprocate.org/archive/resiprocate-users/msg02700.html