CVE-2006-7254 — Uncontrolled Resource Consumption in Glibc

CWE-19CWE-400 — Uncontrolled Resource Consumption9 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 87.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Glibc
Timeline
PublishedApr 10
Latest updateMay 1

Description

The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client sockets if they cannot be handled by the daemon, allowing local users to carry out a denial of service attack on the daemon.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDgnu/glibc< 2.5
▶Debiangnu/glibc< 2.5-1+3

Patches

Patch: sourceware.org ↗Patch: sourceware.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-4678-ch99-9rjx: The nscd daemon in the GNU C Library (glibc) before version 2↗2022-05-01
▶
OSV
CVE-2006-7254: The nscd daemon in the GNU C Library (glibc) before version 2↗2019-04-10
▶
CVEList
CVE-2006-7254: The nscd daemon in the GNU C Library (glibc) before version 2↗2019-04-10
▶

📋Vendor Advisories

2
Red Hat
glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.↗2006-03-31
▶
Debian
CVE-2006-7254: glibc - The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close i...↗2006
▶

💬Community

3
Bugzilla
CVE-2006-7254 glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS.↗2019-04-11
▶
Bugzilla
CVE-2006-7254 glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS. [fedora-29]↗2019-04-11
▶
Bugzilla
CVE-2006-7254 glibc: Not closing unhadleable client sockets due to nscd daemon leads to DoS. [fedora-28]↗2019-04-11
▶