CVE-2017-9732 | BDVDB-2026-110688 Detail

Description#

The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploited remotely without authentication, possibly affecting another services running on the targeted host.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1
http://seclists.org/fulldisclosure/2018/Nov/65
http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.html
https://github.com/irsl/knc-memory-exhaustion/

Exploit#

No public exploit known

History#

Version 12018-12-20Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.