Remote denial of service in Glibc implementation



Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2017-8804
CWE-ID CWE-400
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 Glibc
Universal components / Libraries / Libraries used by multiple products

Vendor GNU

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Denial of service

EUVDB-ID: #VU6434

Risk: Medium

CVSSv4.0: 7.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2017-8804

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an error in xdr_bytes() and xdr_string() functions when processing RPC data in the GNU C Library (aka glibc or libc6). A remote unauthenticated attacker can send a specially crafted UDP request to port 111 (rpcbind) and consume up to 4 gigabytes of memory per request.

Successful exploitation of this vulnerability may result in denial of service (DoS) conditions.

The issue is related to: https://www.cybersecurity-help.cz/vdb/SB2017050801

Mitigation

Install patch from vendor's website.

Vulnerable software versions

Glibc: 2.25

CPE2.3 External links

https://www.openwall.com/lists/oss-security/2017/05/05/2
https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7
https://sourceware.org/bugzilla/show_bug.cgi?id=21461
https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###