CVE-2002-2124 in Nylon

Résumé

par MITRE

The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 28/10/2005
• Divulgation: 31/12/2002
• Modérer: accepté
• Entrée: VDB-19766
• CPE: prêt
• CWE: CWE-400 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.01591
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2124
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2124
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2124/