Critical severity · published Mar 28, 2017
CVE-2016-10152
The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote…
9.8
CVSS
6.8%
EPSS
No
On KEV
Description
The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HE
Hesiod · Hesiod Project
through 3.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10152
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10152
Mailing List
http://www.openwall.com/lists/oss-security/2017/01/21/1
Third Party Advisory
http://www.securityfocus.com/bid/90952
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1332493
Issue Tracking
https://github.com/achernya/hesiod/pull/10
security.gentoo.org
https://security.gentoo.org/glsa/201805-01
More from Hesiod
7.0
CVE-2016-10151
The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to…