The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/100598 | |
| https://access.redhat.com/errata/RHSA-2018:0805 | |
| https://arxiv.org/pdf/1205.4011.pdf | Technical Description Third Party Advisory |
| https://sourceware.org/bugzilla/show_bug.cgi?id=21361 | Issue Tracking Patch Third Party Advisory |
| http://www.securityfocus.com/bid/100598 | |
| https://access.redhat.com/errata/RHSA-2018:0805 | |
| https://arxiv.org/pdf/1205.4011.pdf | Technical Description Third Party Advisory |
| https://sourceware.org/bugzilla/show_bug.cgi?id=21361 | Issue Tracking Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 03:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/100598 - | |
| References | () https://access.redhat.com/errata/RHSA-2018:0805 - | |
| References | () https://arxiv.org/pdf/1205.4011.pdf - Technical Description, Third Party Advisory | |
| References | () https://sourceware.org/bugzilla/show_bug.cgi?id=21361 - Issue Tracking, Patch, Third Party Advisory |
Information
Published : 2017-08-01 16:29
Updated : 2024-11-21 03:08
NVD link : CVE-2017-12132
Mitre link : CVE-2017-12132
CVE.ORG link : CVE-2017-12132
JSON object : View
Products Affected
gnu
- glibc
CWE
CWE-770
Allocation of Resources Without Limits or Throttling