enet ENet library protocol.c enet_protocol_handle_send_fragment denial of service
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
5.0 | $0-$5k | 0.00 |
A vulnerability, which was classified as problematic, was found in enet ENet library (Software Library) (affected version unknown). This affects the function enet_protocol_handle_send_fragment
of the file protocol.c. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. The summary by CVE is:
The enet_protocol_handle_send_fragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote attackers to cause a denial of service (application crash) via a packet fragment with a large total data size, which triggers an application abort when memory allocation fails.
The weakness was presented 03/12/2006 by Luigi Auriemma (Website). It is possible to read the advisory at vupen.com. This vulnerability is uniquely identified as CVE-2006-1195 since 03/13/2006. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known.
A public exploit has been developed in ANSI C and been published even before and not after the advisory. The exploit is shared for download at securityfocus.com. It is declared as proof-of-concept.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
The vulnerability is also documented in the vulnerability database at X-Force (25158). See 29162 for similar entry.
Product
Type
Vendor
Name
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 5.0
VulDB Base Score: 5.3
VulDB Temp Score: 5.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Access: Public
Status: Proof-of-Concept
Programming Language: 🔍
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: no mitigation knownStatus: 🔍
0-Day Time: 🔍
Timeline
03/12/2006 🔍03/12/2006 🔍
03/13/2006 🔍
03/13/2006 🔍
03/13/2006 🔍
03/13/2006 🔍
03/13/2006 🔍
03/14/2006 🔍
03/12/2015 🔍
09/07/2017 🔍
Sources
Advisory: vupen.com⛔Researcher: Luigi Auriemma
Status: Not defined
CVE: CVE-2006-1195 (🔍)
X-Force: 25158 - ENet enet_protocol_handle_send_fragment() denial of service
SecurityTracker: 1015767 - ENet Packet Processing Bugs Let Remote Users Deny Service
SecurityFocus: 17087 - ENet Multiple Denial of Service Vulnerabilities
Secunia: 19208 - ENet Library Two Denial of Service Vulnerabilities, Moderately Critical
OSVDB: 23845 - ENet Library enet_host_service Fragmented Packet Data Allocation DoS
Vupen: ADV-2006-0940
scip Labs: https://www.scip.ch/en/?labs.20161013
See also: 🔍
Entry
Created: 03/12/2015 12:19Updated: 09/07/2017 08:43
Changes: 03/12/2015 12:19 (65), 09/07/2017 08:43 (8)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.