Read the docs

Hesiod Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Hesiod Project records in CISA KEV

No Hesiod Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hesiod 2 records MEDIUM

Records

2 records in Hesiod · all components

TI-2016-08228 CVE-2016-10152 · GHSA-pqgf-2gjv-rp92

The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the…

Priority MEDIUM 52

The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoni…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0683 Published 2017-03-28 Will not fix CWE-264
TI-2016-08227 CVE-2016-10151 · GHSA-753x-9q2q-hv3r

The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to…

Priority LOW 31

The hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the (1) HESIOD_CONFIG…

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00391 Published 2017-03-01 Will not fix CWE-264
Open these records in search →