PT-2017-17184
CVE-2017-6613
·
Publicado
2017-04-20
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
5.8
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Cisco Prime Network Registrar versions prior to 8.3.5
Description
A vulnerability in the DNS input packet processor could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, leading to a partial denial of service (DoS) condition. The issue is due to incomplete DNS packet header validation when a packet is received. An attacker could exploit this by sending a malformed DNS packet, allowing them to cause the DNS process to restart and potentially lead to a DoS condition.
Recommendations
For versions prior to 8.3.5, update to version 8.3.5 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾