POJIA破甲
地图 / owncloud.com: CVE-2015-5477 BIND9 TKEY Vulnerability + Exploit (Denial of Service)

owncloud.com: CVE-2015-5477 BIND9 TKEY Vulnerability + Exploit (Denial of Service)

拒绝服务 / 资源消耗失控 / #89097

厂商
ownCloud
严重程度
未评级
赏金
—
弱点
资源消耗失控
研究员
@xer0dayz
披露日期
2015-09-16
资产
—
CVE
CVE-2015-5477

该报告还没有中文解读。

原文摘录

摘自原文(1850 字符中的一小部分)
owncloud.com appears to be vulnerable to CVE-2015-5477 based on the running version of BIND. This allows attackers to launch Denial of Service attacks against owncloud.com which would result in the owncloud server to stop responding and even reboot. It is recommended to upgrade to the latest …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 ownCloud 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @xer0dayz · 版权归作者与 ownCloud 所有

同类报告

DoS on PayPal via web cache poisoningPayPal · 2019-10-23 · $9,700profile-picture name parameter with large value lead to DoS for other users and programs on the platformHackerOne · 2020-03-25Denial of service to WP-JSON API by cache poisoning the CORS allow origin headerAutomattic · 2020-04-16[Urgent] Invalidating OAuth2 Bearer token makes TweetDeck unavailableX / xAI · 2019-04-25Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite)LocalTapiola · — · $18,000Denial of service via cache poisoningHackerOne · 2018-12-22 · $2,500