CVE-2014-9402

Public on 2015-02-24

Modified on 2018-05-10

Description

The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.

Severity

Low

See what this means

CVSS v3 Base Score

1.2

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 1	glibc	2018-05-10	ALAS-2018-1017	Fixed

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	1.2	AV:L/AC:H/Au:N/C:N/I:N/A:P
NVD	CVSSv2	7.8	AV:N/AC:L/Au:N/C:N/I:N/A:C

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2014-9402 Mitre: CVE-2014-9402