yadifa records

1 published records for vendor yadifa.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

1 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
31Monitor	CVE-2017-14339No exploit	The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it yadifa · yadifa · CWE-835 Pre-auth Denial of service	High7.5	2.5%Sep 20, 2017

CVE-2017-14339
31Monitor
The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
yadifa · yadifaSep 20, 2017