CVE-2016-2224

High

Published: 24/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before version 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply.

Risk Assessment

An attacker can exploit this vulnerability to disrupt system operation, leading to service availability issues.

Recommendation

It is recommended to update uClibc-ng to version 1.0.12 or later to mitigate this vulnerability.

Other vulnerabilities in uClibc-ng

CVE-2016-2225High
The __read_etc_hosts_r function in uClibc-ng before version 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet.

Original NVD description (English source)

The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply.