Critical severity9.8NVD Advisory· Published Mar 28, 2017· Updated May 13, 2026
CVE-2016-10152
CVE-2016-10152
Description
The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.openwall.com/lists/oss-security/2017/01/21/1nvdMailing ListPatchThird Party Advisory
- github.com/achernya/hesiod/pull/10nvdIssue TrackingPatchThird Party Advisory
- www.securityfocus.com/bid/90952nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- security.gentoo.org/glsa/201805-01nvd
News mentions
0No linked articles in our index yet.