VULNERABILITY INTELLIGENCE
CVE-2017-14339
CVSS score7.5 HIGH
EPSS probability2.53%
CISA KEVNot currently listed
Published2017-09-20
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive.
Weakness classification
- CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Primary references
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Exploit, Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory