CVE-2000-0335 — Glibc vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.1%
top 21.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GNU GlibcISC Bind
Timeline
PublishedMay 3
Latest updateApr 30

Description

The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDgnu/glibc5 versions+4
▶NVDisc/bind8.2, 8.2.1, 8.2.2+2

🔴Vulnerability Details

2
GHSA
GHSA-5xg5-fxp7-7627: The resolver in glibc 2↗2022-04-30
▶
CVEList
CVE-2000-0335: The resolver in glibc 2↗2000-10-13
▶
CVE-2000-0335 — GNU Glibc vulnerability | cvebase