CVE-2006-7254 - glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.

Back Back to CVE browser

MEDIUM

glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.

Published Apr 10, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 0.30%

Description

The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.

Affected products

Red Hat Enterprise Linux 5

glibc

Not affected
Red Hat Enterprise Linux 6

glibc

Not affected
Red Hat Enterprise Linux 7

glibc

Not affected
Red Hat Enterprise Linux 8

glibc

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	glibc	Not affected	n/a
Red Hat Enterprise Linux 6	glibc	Not affected	n/a
Red Hat Enterprise Linux 7	glibc	Not affected	n/a
Red Hat Enterprise Linux 8	glibc	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-19

CWE-400

Uncontrolled Resource Consumption

References (6)

https://access.redhat.com/security/cve/CVE-2006-7254
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1698738
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-7231
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2006-7254
https://sourceware.org/bugzilla/show_bug.cgi?id=2498
x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2006-7254

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2006-7254		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1698738		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-7231		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2006-7254
https://sourceware.org/bugzilla/show_bug.cgi?id=2498		x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2006-7254