Vulnerability CVE-2006-7254


Published: 2019-04-10

Description:
The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.

Type:

CWE-19

(Data Handling)

Vendor: GNU
Product: Glibc 
Version:
2.4
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.10
2.3.1
2.3
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2
2.1.9
2.1.3.10
2.1.3
2.1.2
2.1.1.6
2.1.1
2.1
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.09.5
1.09.3
1.09.2
1.09.1
1.09
1.08.9
1.08.8
1.08.7
1.08.6
1.08.5
1.08.4
1.08.3
1.08.14
1.08.13
1.08.12
1.08.11
1.08.10
1.08.1
1.08
1.07.6
1.07.5
1.07.4
1.07.3
1.07.2
1.07.1
1.07
1.06.9
1.06.8
1.06.7
1.06.6
1.06.4
1.06.3
1.06.2
1.06.13
1.06.12
1.06.11
1.06.10
1.06.1
1.06
1.05
1.04
1.03
1.02
1.01
1.00
0.6
0.5
0.4.1
0.4
0.1

CVSS2 => (AV:L/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.1/10
2.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial

 References:
https://sourceware.org/bugzilla/show_bug.cgi?id=2498

Related CVE
CVE-2019-1010025
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc.
CVE-2019-1010024
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc.
CVE-2019-1010023
GNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to ...
CVE-2019-1010022
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack...
CVE-2019-12972
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section o...
CVE-2012-6711
A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to p...
CVE-2018-12886
stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack ...
CVE-2019-5953
Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.

Copyright 2019, cxsecurity.com

 

Back to Top