CVE-2016-2225

High

Published: 24/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The __read_etc_hosts_r function in uClibc-ng before version 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet.

Risk Assessment

An attacker can exploit this vulnerability to disrupt services, leading to system downtime.

Recommendation

It is recommended to update uClibc-ng to version 1.0.12 or later to mitigate this vulnerability.

Other vulnerabilities in uClibc-ng

CVE-2016-2224High
The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before version 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply.

Original NVD description (English source)

The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet.