CVE-2017-12132 | BDVDB-2026-88346 Detail

Description#

The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://arxiv.org/pdf/1205.4011.pdf
http://www.securityfocus.com/bid/100598
https://sourceware.org/bugzilla/show_bug.cgi?id=21361
https://access.redhat.com/errata/RHSA-2018:0805

Exploit#

No public exploit known

History#

Version 12017-08-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.