PT-2016-3207 · Mit · Hesiod

Carnil · Published 2016-05-03 · Updated 2018-10-21 · CVE-2016-10152

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hesiod version 3.2.1

Description The issue is related to the read config file function in lib/hesiod.c, which falls back to the ".athena.mit.edu" default domain when opening the configuration file fails. This allows remote attackers to gain root privileges by poisoning the DNS cache. The exploitation of this issue can lead to a remote attacker gaining root privileges by damaging the integrity of the DNS data through DNS cache manipulation.

Recommendations For Hesiod version 3.2.1, consider disabling the read config file function as a temporary workaround until a patch is available. Restrict access to the DNS cache to minimize the risk of exploitation. Avoid using the default domain ".athena.mit.edu" in the configuration file to prevent potential manipulation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2017-02496

CVE-2016-10152

DLA-796-1

Affected Products

Hesiod

References · 13

• https://github.com/achernya/hesiod/pull/10 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10152 · Vendor Advisory
• http://openwall.com/lists/oss-security/2017/01/21/1 · Patch
• https://ubuntu.com/security/CVE-2016-10152 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10152 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10152 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10152 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-10152 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-10152 · Security Note
• https://bdu.fstec.ru/vul/2017-02496 · Security Note
• https://security.gentoo.org/glsa/201805-01 · Vendor Advisory
• http://securityfocus.com/bid/90952 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1332493 · Note