Security Advisory

CVE-2017-8804

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-05-07 18:00:00
Last updated 2024-08-05 16:48:22
Assigner mitre
State PUBLISHED

Description

The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references