p PatchFirst

CVE-2017-7458

CVE-2017-7458

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty field that should have contained a hostname or IP address.

CVSS 7.5 · High · EPSS 1.9%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • ntopng Ubuntu:Pro:16.04:LTS

    Versions
    • 1.2.1+dfsg1-2ubuntu1
    • 2.0+dfsg1-1
    • 2.2+dfsg1-1
    • 2.2+dfsg1-1build1
    • 2.2+dfsg1-1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ntopng Ubuntu:22.04:LTS

    Versions
    • 5.2.1+dfsg1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →