Allocation of Resources Without Limits or Throttling Affecting eglibc package, versions *
Snyk CVSS
Attack Complexity
High
Integrity
High
Threat Intelligence
EPSS
0.19% (56th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UBUNTU1404-EGLIBC-282782
- published 1 Aug 2017
- disclosed 1 Aug 2017
Introduced: 1 Aug 2017
CVE-2017-12132 Open this link in a new tabHow to fix?
There is no fixed version for Ubuntu:14.04
eglibc
.
NVD Description
Note: Versions mentioned in the description apply only to the upstream eglibc
package and not the eglibc
package as distributed by Ubuntu
.
See How to fix?
for Ubuntu:14.04
relevant fixed versions and status.
The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.