Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-9402
HistoryFeb 24, 2015 - 3:59 p.m.

CVE-2014-9402

2015-02-2415:59:02
CWE-399
[email protected]
web.nvd.nist.gov
125
cve-2014-9402
nss_dns
getnetbyname
gnu c library
glibc
denial of service
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.9 High

AI Score

Confidence

High

0.107 Low

EPSS

Percentile

95.1%

JSON

The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.

Affected configurations

NVD
Node
gnuglibcRange≤2.20
Node
canonicalubuntu_linuxMatch10.04-lts
OR
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10
OR
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
CPENameOperatorVersion
gnu:glibcgnu glibcle2.20

Related

nessus 27
ubuntucve 1
openvas 16
prion 1
f5 2
nvd 1
debian 2
cvelist 1
debiancve 1
mageia 1
archlinux 1
fedora 1
ubuntu 1
ibm 10
centos 1
amazon 1
redhat 1
securityvulns 2
oraclelinux 2
osv 1
gentoo 1
packetstorm 2
oracle 1
nessus
nessus
EulerOS Virtualization 2.5.1 : glibc (EulerOS-SA-2018-1272)
2018-09-18 00:00:00
F5 Networks BIG-IP : glibc vulnerability (K16365)
2018-12-18 00:00:00
Debian DLA-122-1 : eglibc security update
2015-03-26 00:00:00
ubuntucve
ubuntucve
CVE-2014-9402
2015-02-24 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2018-1272)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-122-1)
2023-03-08 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2017-1147)
2020-01-23 00:00:00
prion
prion
Design/Logic Flaw
2015-02-24 15:59:00
f5
f5
SOL16365 - GNU C Library (glibc) vulnerability CVE-2014-9402
2015-04-03 00:00:00
K16365 : glibc vulnerability CVE-2014-9402
2015-07-23 00:00:00
nvd
nvd
CVE-2014-9402
2015-02-24 15:59:02
debian
debian
[SECURITY] [DLA 122-1] eglibc security update
2014-12-22 23:19:26
[SECURITY] [DSA 3169-1] eglibc security update
2015-02-23 06:08:58
cvelist
cvelist
CVE-2014-9402
2015-02-24 15:00:00
debiancve
debiancve
CVE-2014-9402
2015-02-24 15:59:02
mageia
mageia
Updated glibc packages fix security vulnerabilities
2015-01-08 15:24:22
archlinux
archlinux
glibc: arbitrary code execution
2014-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: glibc-2.20-8.fc21
2015-03-04 10:27:01
ubuntu
ubuntu
GNU C Library vulnerabilities
2015-02-26 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in glibc affect IBM Flex System Manager(FSM) (CVE-2013-7423, CVE-2014-7817, CVE-2014-9402, CVE-2015-1472)
2019-01-31 01:45:01
Security Bulletin: Multiple vulnerabilities in glibc affect IBM Flex System Manager(FSM) (CVE-2013-7423, CVE-2014-7817, CVE-2014-9402, CVE-2015-1472)
2019-01-31 01:45:01
Security Bulletin: Vulnerabilities in Glibc affect Power Hardware Management Console ( CVE-2017-15670, CVE-2017-12132, CVE-2015-5180, CVE-2014-9402)
2021-09-22 23:05:38
centos
centos
glibc, nscd security update
2018-04-26 17:41:43
amazon
amazon
Important: glibc
2018-05-10 17:45:00
redhat
redhat
(RHSA-2018:0805) Moderate: glibc security, bug fix, and enhancement update
2018-04-10 05:01:26
securityvulns
securityvulns
GNU glibc multiple security vulnerabilities
2015-03-07 00:00:00
[SECURITY] [DSA 3169-1] eglibc security update
2015-03-07 00:00:00
oraclelinux
oraclelinux
glibc security update
2018-04-18 00:00:00
glibc security, bug fix, and enhancement update
2018-04-16 00:00:00
osv
osv
eglibc - security update
2015-02-23 00:00:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2016-02-17 00:00:00
packetstorm
packetstorm
Cisco Device Hardcoded Credentials / GNU glibc / BusyBox
2019-09-04 00:00:00
WAGO 852 Industrial Managed Switch Series Code Execution / Hardcoded Credentials
2019-06-13 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.9 High

AI Score

Confidence

High

0.107 Low

EPSS

Percentile

95.1%

JSON
Related for CVE-2014-9402
nessus27ubuntucve1openvas16prion1f52nvd1debian2cvelist1debiancve1mageia1archlinux1fedora1ubuntu1ibm10centos1amazon1redhat1securityvulns2oraclelinux2osv1gentoo1packetstorm2oracle1