CVE-2017-9454 | BDVDB-2026-89340 Detail

Description#

Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/resiprocate/resiprocate/commit/d67a9ca6fd06ca65d23e313bdbad1ef4dd3aa0df
https://list.resiprocate.org/archive/resiprocate-users/msg02700.html

Exploit#

No public exploit known

History#

Version 12017-08-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.