CVE-2002-2124 in Nylon

الملخص

بحسب MITRE

The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 28/10/2005
• إفشاء: 31/12/2002
• الاعتدال: تمت الموافقة
• إدخال: VDB-19766
• CPE: جاهز
• CWE: CWE-400 (مؤكد)
• CVSS: 5.0 (NVD)
• EPSS: 0.01591
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2124
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2124
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2124/