Security Advisory

CVE-2017-2909

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-07 16:00:00

Last updated 2024-09-17 03:17:47

Assigner talos

CVSS score 7.5

State PUBLISHED

Description

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗