VULNERABILITY INTELLIGENCE

CVE-2016-2224

CVSS score7.5 HIGH

EPSS probability2.80%

CISA KEVNot currently listed

Published2017-03-24

Last modified2026-06-17

Description

The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply.