7.5

CVE-2017-9732

Exploit
The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploited remotely without authentication, possibly affecting another services running on the targeted host.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Secure-endpoints ≫ Kerberised Netcat Version < 1.11-1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.04% 0.893
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html
Patch
Third Party Advisory
Exploit
VDB Entry
http://seclists.org/fulldisclosure/2018/Nov/65
Patch
Third Party Advisory
Exploit
Mailing List
https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1
Patch
Third Party Advisory
https://github.com/irsl/knc-memory-exhaustion/
Patch
Third Party Advisory
Exploit