{"containers": {"cna": {"providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "rejectedReasons": [{"lang": "en", "value": "gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to (1) perform excessive CPU computation and (2) send the entire tree, which consumes network bandwidth. NOTE: the vendor and original researcher have disputed this issue, since legitimate requests can generate the same amount of resource consumption. CVE concurs with the dispute, so this identifier should not be used"}]}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-0242", "datePublished": "2009-01-21T11:00:00", "dateRejected": "2009-01-29T10:00:00", "dateReserved": "2009-01-20T00:00:00", "dateUpdated": "2017-08-07T12:57:01", "state": "REJECTED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to (1) perform excessive CPU computation and (2) send the entire tree, which consumes network bandwidth. NOTE: the vendor and original researcher have disputed this issue, since legitimate requests can generate the same amount of resource consumption. CVE concurs with the dispute, so this identifier should not be used"}], "id": "CVE-2009-0242", "lastModified": "2023-11-07T02:03:36.253", "metrics": {}, "published": "2009-01-21T11:30:04.233", "references": [], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "Red Hat does not consider this to be a security issue. For more information, please see the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0242", "lastModified": "2009-01-22T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Rejected"}

{"bugzilla": {"description": "ganglia: gmetad temporary DoS via resource consumption", "id": "480960", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=480960"}, "csaw": false, "details": ["This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: gmetad in Ganglia 3.1.1, when supporting multiple requests per connection on an interactive port, allows remote attackers to cause a denial of service via a request to the gmetad service with a path that does not exist, which causes Ganglia to (1) perform excessive CPU computation and (2) send the entire tree, which consumes network bandwidth. NOTE: the vendor and original researcher have disputed this issue, since legitimate requests can generate the same amount of resource consumption. CVE concurs with the dispute, so this identifier should not be used"], "name": "CVE-2009-0242", "public_date": "2009-01-13T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2009-0242\nhttps://nvd.nist.gov/vuln/detail/CVE-2009-0242"], "statement": "Red Hat does not consider this to be a security issue. For more information, please see the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0242", "threat_severity": "Low"}