CVE-2017-8804: High severity gnu c library (glibc) vulnerability
DISPUTED The xdrbytes and xdrstring functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references]
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8804?
CVE-2017-8804 has a severity rating of medium as it can lead to denial of service due to memory consumption.
How do I fix CVE-2017-8804?
To fix CVE-2017-8804, you should upgrade to a patched version of the GNU C Library beyond 2.25.
What systems are affected by CVE-2017-8804?
CVE-2017-8804 specifically affects the GNU C Library versions 2.25.
Who can exploit CVE-2017-8804?
CVE-2017-8804 can potentially be exploited by remote attackers to cause a denial of service.
What impacts does CVE-2017-8804 have on a system?
The impact of CVE-2017-8804 includes the potential for significant memory consumption and denial of service on affected systems.