CVE-2017-12132

MEDIUM

glibc < 2.26 - DNS Stub Resolver Resource Exhaustion via EDNS Large UDP Responses

Title source: llm

Description

The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.

References (4)

Core 4

Core References

Technical Description, Third Party Advisory x_refsource_misc

https://arxiv.org/pdf/1205.4011.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100598

Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://sourceware.org/bugzilla/show_bug.cgi?id=21361

Vendor Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:0805

Scores

CVSS v3 5.9

EPSS 0.0060

EPSS Percentile 69.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-770

Status published

Products (1)

gnu/glibc < 2.25

Published Aug 01, 2017

Tracked Since Feb 18, 2026