PT-2015-7778 · Isc · Isc Kea

Publicado 2015-12-22 · Atualizado 2016-12-07 · CVE-2015-8373

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC Kea versions 0.9.2 through 1.0.0-beta

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a malformed packet when certain debugging settings are used.

Recommendations For versions 0.9.2 through 1.0.0-beta, consider disabling the debugging settings to prevent the daemon crash until a fix is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-8373

Produtos afetados

Isc Kea

Referências · 4

• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175218.html · Aviso do Fabricante
• https://kb.isc.org/article/AA-01318 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-8373 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175337.html · Aviso do Fabricante