CVE-2017-9454 Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS...
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| resiprocate | <= 1.10.2 | No fix listed |
| resiprocate | = 1.11.0-alpha1 | No fix listed |
| resiprocate | = 1.11.0-alpha10 | No fix listed |
| resiprocate | = 1.11.0-alpha11 | No fix listed |
| resiprocate | = 1.11.0-alpha2 | No fix listed |
| resiprocate | = 1.11.0-alpha3 | No fix listed |
| resiprocate | = 1.11.0-alpha4 | No fix listed |
| resiprocate | = 1.11.0-alpha5 | No fix listed |
| resiprocate | = 1.11.0-alpha6 | No fix listed |
| resiprocate | = 1.11.0-alpha7 | No fix listed |
| resiprocate | = 1.11.0-alpha8 | No fix listed |
| resiprocate | = 1.11.0-alpha9 | No fix listed |
| resiprocate | = 1.11.0-beta1 | No fix listed |
| resiprocate | = 1.11.0-beta2 | No fix listed |
| resiprocate | = 1.11.0-beta3 | No fix listed |
| resiprocate | = 1.11.0-beta4 | No fix listed |
| resiprocate | = 1.11.0-beta5 | No fix listed |
| resiprocate | = 1.12.0-alpha1 | No fix listed |
| resiprocate | = 1.12.0-beta1 | No fix listed |
| resiprocate | = 1.12.0-beta2 | No fix listed |
| resiprocate | = 1.12.0-beta3 | No fix listed |
| resiprocate | = 1.12.0-beta4 | No fix listed |
| resiprocate | = 1.12.0-beta5 | No fix listed |
| resiprocate | = 1.12.0-beta6 | No fix listed |
| resiprocate | = 1.12.0-beta7 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| resiprocate | = 1.12.0-beta8 | No fix listed |
| resiprocate | = 1.12.0-beta9 | No fix listed |
References
- github.com patch third-party-advisory
- [security] 20170806 ares_parse_a_reply out-of-bounds read (CVE=2017-9454) mailing-list vendor-advisory