Vulnerability Details CVE-2014-3484
Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2014-3484
-
cpe:2.3:a:musl-libc:musl:0.9.13
-
cpe:2.3:a:musl-libc:musl:0.9.14
-
cpe:2.3:a:musl-libc:musl:0.9.15
-
cpe:2.3:a:musl-libc:musl:1.0.0
-
cpe:2.3:a:musl-libc:musl:1.0.1
-
cpe:2.3:a:musl-libc:musl:1.0.2
-
cpe:2.3:a:musl-libc:musl:1.0.3
-
cpe:2.3:a:musl-libc:musl:1.1.0
-
cpe:2.3:a:musl-libc:musl:1.1.1