Lucene search

K
redosRedosROS-20240403-04
HistoryApr 03, 2024 - 12:00 a.m.

ROS-20240403-04

2024-04-0300:00:00
redos.red-soft.ru
10
systemd
vulnerability
dns
exploitation
remote intruder
information security

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

59.6%

Vulnerability of on_stream_io() and dns_stream_complete() functions of the subsystem of initialization and management of services
Systemd is related to not incrementing the reference count for the DnsStream object. Exploitation of the vulnerability could
allow a remote intruder to violate the integrity and availability of protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64systemd< 246.10-6UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

59.6%