CVE-2017-9732

The read_packet function in knc (Kerberised NetCat) before 1.11-1 is vulnerable to denial of service (memory exhaustion) that can be exploited remotely without authentication, possibly affecting another services running on the targeted host.

• CWE-400

• http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.htmlExploit, Patch, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/65Exploit, Mailing List, Patch, Third Party Advisory
• https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1Patch, Third Party Advisory
• https://github.com/irsl/knc-memory-exhaustion/Exploit, Patch, Third Party Advisory
• http://packetstormsecurity.com/files/150534/knc-Kerberized-NetCat-Denial-Of-Service.htmlExploit, Patch, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/65Exploit, Mailing List, Patch, Third Party Advisory
• https://github.com/elric1/knc/commit/f237f3e09ecbaf59c897f5046538a7b1a3fa40c1Patch, Third Party Advisory
• https://github.com/irsl/knc-memory-exhaustion/Exploit, Patch, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9726The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscr…
• CVE-2017-9727The gx_ttfReader__Read function in base/gxttfb.c in Artifex …
• CVE-2017-9728In uClibc 0.9.33.2, there is an out-of-bounds read in the ge…
• CVE-2017-9729In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled …
• CVE-2017-9730SQL injection vulnerability in rdr.php in nuevoMailer versio…9.8
• CVE-2017-9731In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.…
• CVE-2017-9735Jetty through 9.4.x is prone to a timing channel in util/sec…7.5
• CVE-2017-9736SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not rem…
• CVE-2017-9739The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscr…
• CVE-2017-9740The xps_decode_font_char_imp function in xps/xpsfont.c in Ar…
• CVE-2017-9741install/make-config.php in ProjectSend r754 allows remote at…
• CVE-2017-9742The score_opcodes function in opcodes/score7-dis.c in GNU Bi…