7.5

CVE-2017-9732

Exploit
The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploited remotely without authentication, possibly affecting another services running on the targeted host.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Secure-endpoints ≫ Kerberised Netcat Version < 1.11-1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.04% 0.893
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html
Patch
Third Party Advisory
Exploit
VDB Entry
http://seclists.org/fulldisclosure/2018/Nov/65
Patch
Third Party Advisory
Exploit
Mailing List
https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1
Patch
Third Party Advisory
https://github.com/irsl/knc-memory-exhaustion/
Patch
Third Party Advisory
Exploit