CVE-2017-12132

The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name…

published August 1, 2017

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01958 · 80.1th percentile
Published
2017-08-01T16:00Z
EPSS history
Timeline
  • 01 AUG 16:00Z
    The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name…
    cvelistv5