CVE-2014-9402: canonical ubuntu_linux Resource Management Errors
Vulnerability summary
CVE-2014-9402 is a high (CVSS 7.8) Resource Management Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 7.83% chance of exploitation in the next 30 days, higher than 94.6% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 24-02-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.83%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
No change 0.00 pp
From 7.83% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (sourceware.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- eglibc< 2.11.3-4+deb6u3
- glibc< 2.19-14
Canonical1 product
- ubuntu_linuxEOL10.04 | 12.04 | 14.04 | 14.10
Gnu1 product
- glibc≤ 2.20
Opensuse1 product
- opensuseEOL13.1 | 13.2
Ubuntu1 product
- eglibc< 2.19-0ubuntu6.6
5 vendors · 6 products
References
18 links- www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlX Refsource CONFIRM
Show all 18 references
- packetstormsecurity.com/files/…X Refsource MISC
