CVE-2014-9402 Detail

Vendors and Products

CPE, which stands for Common Platform Enumeration, is a standardized scheme for naming hardware, software, and operating systems. CPE provides a structured naming scheme to uniquely identify and classify information technology systems, platforms, and packages based on certain attributes such as vendor, product name, version, update, edition, and language.

CVE-2014-9402

EPSS

11.14%V3

Vector

Network

Published

2015-02-24
14h00 +00:00

Modified

2019-09-04
23h06 +00:00

Official links

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Notifications manage

List of Notifications

Notifications for a CVE

Stay informed of any changes for a specific CVE.

Criteria applied when sending the alert: compared with the last alert sent + differences in CISA, EPSS, CVSS, CWE, Solutions, CPE.

Parameters

You can specify a title that will be retrieved in the alerts that will be sent out.

Specified here a CVE ID as CVE-2025-1234

Planning

Month

Next run calculation

Day

Weekday

Hour

Minute

Creation date

-

Last execution

-

Next execution

-

Functionality requiring a connection

This feature, which allows you to receive alerts, is only active when you are logged into your account.

CVE Descriptions

The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	7.8		AV:N/AC:L/Au:N/C:N/I:N/A:C	[email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Gnu>>Glibc >> Version To (including) 2.20

Gnu>>Glibc >> Version - (Open CPE detail)
Gnu>>Glibc >> Version - (Open CPE detail)
Gnu>>Glibc >> Version 0.1 (Open CPE detail)
Gnu>>Glibc >> Version 0.4 (Open CPE detail)
Gnu>>Glibc >> Version 0.4.1 (Open CPE detail)
Gnu>>Glibc >> Version 0.5 (Open CPE detail)
Gnu>>Glibc >> Version 0.6 (Open CPE detail)
Gnu>>Glibc >> Version 1.00 (Open CPE detail)
Gnu>>Glibc >> Version 1.01 (Open CPE detail)
Gnu>>Glibc >> Version 1.02 (Open CPE detail)
Gnu>>Glibc >> Version 1.03 (Open CPE detail)
Gnu>>Glibc >> Version 1.04 (Open CPE detail)
Gnu>>Glibc >> Version 1.05 (Open CPE detail)
Gnu>>Glibc >> Version 1.06 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.1 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.2 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.3 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.4 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.6 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.7 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.8 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.9 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.10 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.11 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.12 (Open CPE detail)
Gnu>>Glibc >> Version 1.06.13 (Open CPE detail)
Gnu>>Glibc >> Version 1.07 (Open CPE detail)
Gnu>>Glibc >> Version 1.07.1 (Open CPE detail)
Gnu>>Glibc >> Version 1.07.2 (Open CPE detail)
Gnu>>Glibc >> Version 1.07.3 (Open CPE detail)
Gnu>>Glibc >> Version 1.07.4 (Open CPE detail)
Gnu>>Glibc >> Version 1.07.5 (Open CPE detail)
Gnu>>Glibc >> Version 1.07.6 (Open CPE detail)
Gnu>>Glibc >> Version 1.08 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.1 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.3 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.4 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.5 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.6 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.7 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.8 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.9 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.10 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.11 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.12 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.13 (Open CPE detail)
Gnu>>Glibc >> Version 1.08.14 (Open CPE detail)
Gnu>>Glibc >> Version 1.09 (Open CPE detail)
Gnu>>Glibc >> Version 1.09.1 (Open CPE detail)
Gnu>>Glibc >> Version 1.09.2 (Open CPE detail)
Gnu>>Glibc >> Version 1.09.3 (Open CPE detail)
Gnu>>Glibc >> Version 1.09.5 (Open CPE detail)
Gnu>>Glibc >> Version 1.90 (Open CPE detail)
Gnu>>Glibc >> Version 1.91 (Open CPE detail)
Gnu>>Glibc >> Version 1.92 (Open CPE detail)
Gnu>>Glibc >> Version 1.93 (Open CPE detail)
Gnu>>Glibc >> Version 2.0 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.3 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.4 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.5 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.5 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.6 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.92 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.95 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.96 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.97 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.98 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.99 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.100 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.101 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.103 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.106 (Open CPE detail)
Gnu>>Glibc >> Version 2.0.112 (Open CPE detail)
Gnu>>Glibc >> Version 2.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.1.6 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.3 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.3.10 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.9 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.91 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.92 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.93 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.94 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.95 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.96 (Open CPE detail)
Gnu>>Glibc >> Version 2.1.97 (Open CPE detail)
Gnu>>Glibc >> Version 2.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.2.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.2.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.2.3 (Open CPE detail)
Gnu>>Glibc >> Version 2.2.4 (Open CPE detail)
Gnu>>Glibc >> Version 2.2.5 (Open CPE detail)
Gnu>>Glibc >> Version 2.3 (Open CPE detail)
Gnu>>Glibc >> Version 2.3.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.3.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.3.3 (Open CPE detail)
Gnu>>Glibc >> Version 2.3.4 (Open CPE detail)
Gnu>>Glibc >> Version 2.3.5 (Open CPE detail)
Gnu>>Glibc >> Version 2.3.6 (Open CPE detail)
Gnu>>Glibc >> Version 2.3.10 (Open CPE detail)
Gnu>>Glibc >> Version 2.4 (Open CPE detail)
Gnu>>Glibc >> Version 2.5 (Open CPE detail)
Gnu>>Glibc >> Version 2.5.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.6 (Open CPE detail)
Gnu>>Glibc >> Version 2.6.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.7 (Open CPE detail)
Gnu>>Glibc >> Version 2.8 (Open CPE detail)
Gnu>>Glibc >> Version 2.9 (Open CPE detail)
Gnu>>Glibc >> Version 2.10 (Open CPE detail)
Gnu>>Glibc >> Version 2.10.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.10.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.11 (Open CPE detail)
Gnu>>Glibc >> Version 2.11.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.11.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.11.3 (Open CPE detail)
Gnu>>Glibc >> Version 2.12 (Open CPE detail)
Gnu>>Glibc >> Version 2.12 (Open CPE detail)
Gnu>>Glibc >> Version 2.12.0 (Open CPE detail)
Gnu>>Glibc >> Version 2.12.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.12.2 (Open CPE detail)
Gnu>>Glibc >> Version 2.13 (Open CPE detail)
Gnu>>Glibc >> Version 2.14 (Open CPE detail)
Gnu>>Glibc >> Version 2.14.1 (Open CPE detail)
Gnu>>Glibc >> Version 2.14.9000 (Open CPE detail)
Gnu>>Glibc >> Version 2.15 (Open CPE detail)
Gnu>>Glibc >> Version 2.16 (Open CPE detail)
Gnu>>Glibc >> Version 2.16.0 (Open CPE detail)
Gnu>>Glibc >> Version 2.16.90 (Open CPE detail)
Gnu>>Glibc >> Version 2.17 (Open CPE detail)
Gnu>>Glibc >> Version 2.17 (Open CPE detail)
Gnu>>Glibc >> Version 2.17.90 (Open CPE detail)
Gnu>>Glibc >> Version 2.18 (Open CPE detail)
Gnu>>Glibc >> Version 2.18 (Open CPE detail)
Gnu>>Glibc >> Version 2.18.90 (Open CPE detail)
Gnu>>Glibc >> Version 2.19 (Open CPE detail)
Gnu>>Glibc >> Version 2.19.90 (Open CPE detail)
Gnu>>Glibc >> Version 2.20 (Open CPE detail)
Gnu>>Glibc >> Version 2.20 (Open CPE detail)

Configuraton 0

Canonical>>Ubuntu_linux >> Version 10.04

Canonical>>Ubuntu_linux >> Version 10.04 (Open CPE detail)

Canonical>>Ubuntu_linux >> Version 12.04

Canonical>>Ubuntu_linux >> Version 12.04 (Open CPE detail)

Canonical>>Ubuntu_linux >> Version 14.04

Canonical>>Ubuntu_linux >> Version 14.04 (Open CPE detail)

Canonical>>Ubuntu_linux >> Version 14.10

Canonical>>Ubuntu_linux >> Version 14.10 (Open CPE detail)

Opensuse>>Opensuse >> Version 13.1

Opensuse>>Opensuse >> Version 13.1 (Open CPE detail)

Opensuse>>Opensuse >> Version 13.2

Opensuse>>Opensuse >> Version 13.2 (Open CPE detail)

References

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
Tags : x_refsource_CONFIRM

https://sourceware.org/bugzilla/show_bug.cgi?id=17630
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html
Tags : vendor-advisory, x_refsource_SUSE

https://security.gentoo.org/glsa/201602-02
Tags : vendor-advisory, x_refsource_GENTOO

http://www.openwall.com/lists/oss-security/2014/12/18/1
Tags : mailing-list, x_refsource_MLIST

http://www.ubuntu.com/usn/USN-2519-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.securityfocus.com/bid/71670
Tags : vdb-entry, x_refsource_BID

https://access.redhat.com/errata/RHSA-2018:0805
Tags : vendor-advisory, x_refsource_REDHAT

http://seclists.org/fulldisclosure/2019/Jun/18
Tags : mailing-list, x_refsource_FULLDISC

https://seclists.org/bugtraq/2019/Jun/14
Tags : mailing-list, x_refsource_BUGTRAQ

http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
Tags : x_refsource_MISC

http://seclists.org/fulldisclosure/2019/Sep/7
Tags : mailing-list, x_refsource_FULLDISC

https://seclists.org/bugtraq/2019/Sep/7
Tags : mailing-list, x_refsource_BUGTRAQ

http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
Tags : x_refsource_MISC