CVE-2016-10152 The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root p...
CriticalCVSS 9.8
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/hesiod(Debian:12) | < 3.2.1-3.1 | 3.2.1-3.1 |
| debian/hesiod(Debian:13) | < 3.2.1-3.1 | 3.2.1-3.1 |
| debian/hesiod(Debian:14) | < 3.2.1-3.1 | 3.2.1-3.1 |
| hesiod project hesiod | <= 3.2.1 | No fix listed |
References
- Debian Security Tracker CVE-2016-10152 vendor-advisory
- [oss-security] 20170120 Re: CVE Request: two flaws in hesiod permitting privilege elevation mailing-list patch third-party-advisory
- 90952 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking
- github.com issue-tracking patch third-party-advisory
- GLSA-201805-01 vendor-advisory
- bugs.debian.org issue-tracking