drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in nbd
Name: |
Zwei Probleme in nbd |
|
ID: |
DSA-3271-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian sid, Debian wheezy, Debian jessie, Debian stretch |
|
Datum: |
Sa, 23. Mai 2015, 15:01 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7441
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0847 |
|
Applikationen: |
nbd |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3271-1 security@debian.org http://www.debian.org/security/ Alessandro Ghedini May 23, 2015 http://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : nbd CVE ID : CVE-2013-7441 CVE-2015-0847 Debian Bug : 781547 784657
Tuomas Räsänen discovered that unsafe signal handling in nbd-server, the server for the Network Block Device protocol, could allow remote attackers to cause a deadlock in the server process and thus a denial of service.
Tuomas Räsänen also discovered that the modern-style negotiation was carried out in the main server process before forking the actual client handler. This could allow a remote attacker to cause a denial of service (crash) by querying a non-existent export. This issue only affected the oldstable distribution (wheezy).
For the oldstable distribution (wheezy), these problems have been fixed in version 1:3.2-4~deb7u5.
For the stable distribution (jessie), these problems have been fixed in version 1:3.8-4+deb8u1.
For the testing distribution (stretch), these problems have been fixed in version 1:3.10-1.
For the unstable distribution (sid), these problems have been fixed in version 1:3.10-1.
We recommend that you upgrade your nbd packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJVYFrbAAoJEK+lG9bN5XPLrv8P/jv/zvlWAzlvqrqmr7EC0xeQ hejXBhGvMmgkbnBMNW6IvKQkG0nBOC8zThzqPca3WBcVH17zqwmnd9ETjXnLyGbb ula691iocQFR3tW40R0aLjeYl5Qpi8DI7Njr/7Rv58nSBHXJoXh56oKP48siGhxN 0hNaFwIRwtZ6Tmx9DVJLX1x5bjcz04A0E9SILVdhTEob3CIY28HvucA2pC0i6zsV YBkb+NhtKrOUsB3P/JKpFz58ZuxYBmaG/9TNP7Em6iD5VoP6X7svlzEsxLrAiMPN rM5PqQkKH1pPRCY6Zzu+bqaHBs31m2/I2WGKmsrzvL9mfrvFAz1l2Dn5jdjcd0ko MzfpF0cLK8SyBZWOQ3G5M1g1dZ9QWklMkluoJTgAaLLw422kZjX75BeoOq5vuTSo OYrzp825RKa2wgjsD1Vn4NYO8T1kJebW72PmczbseAeKissaHlqTuSt/RgXuztbb zmvAEfjPESdcsEIpso0vG3BbG5eSIz0vYsuuxuVCGHc8vNq82YRzSRvY+5yLG1QD VdbNhofzgL9ltOf0EO3qvnzDhon9srdB1E/nThSAHjDT5jSlsuUU7jE4tAECAAsF In/UXFPTg7dhf0GPWXGra/1E4wP7CNdNkXNEo6K3g1prxJhPdYMtSpnmPvGNz2Y1 iYxSjTXFN26fFZjMcoUH =UsE0 -----END PGP SIGNATURE-----
-- To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: https://lists.debian.org/20150523104806.2F6444F@bendel.debian.org
|
|
|
|