2216
Technology : Web Server (Prevalence = Undetermined)
Technology : Client Server (Prevalence = Undetermined)
Technology : Cloud Computing (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Availability DoS: Amplification High
Potential Mitigations
Phase: System Configuration
Assign IP addresses that are not 0.0.0.0.
Effectiveness = High
Phase: System Configuration
Strategy = Firewall
Unwanted connections to the configured server may be denied through a firewall or other packet
filtering measures.
Effectiveness = High
Demonstrative Examples
Example 1:
The following code snippet uses 0.0.0.0 in a Puppet script.
Example Language: Other (Bad)
signingserver::instance {
"nightly-key-signing-server":
listenaddr => "0.0.0.0",
port => "9100",
code_tag => "SIGNING_SERVER",
}
The Puppet code snippet is used to provision a signing server that will use 0.0.0.0 to accept traffic.
However, as 0.0.0.0 is unrestricted, malicious users may use this IP address to launch frequent
requests and cause denial of service attacks.
Example Language: Other (Good)
signingserver::instance {
"nightly-key-signing-server":
listenaddr => "127.0.0.1",
port => "9100",
code_tag => "SIGNING_SERVER",
}
Observed Examples
Reference Description
CVE-2022-21947 Desktop manager for Kubernetes and container management binds a service
to 0.0.0.0, allowing users on the network to make requests to a dashboard API.
https://www.cve.org/CVERecord?id=CVE-2022-21947
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
CWE Version 4.14
CWE-1328: Security Version Number Mutable to Older Versions
CWE-1328: Security Version Number Mutable to Older Versions