Vulnerabilities > CVE-2007-5030 - Numeric Errors vulnerability in Dibbler 0.6.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
References
- http://klub.com.pl/dhcpv6/
- http://labs.musecurity.com/wp-content/uploads/2007/09/mu-200709-02.txt
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065892.html
- http://osvdb.org/40568
- http://secunia.com/advisories/26876
- http://www.securityfocus.com/bid/25726
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36684