Minor security fix in 1.0.16

Bug #5209 reported by Regit
4
Affects Status Importance Assigned to Milestone
nufw (Ubuntu)
Fix Released
High
MOTU
Breezy
Invalid
Medium
MOTU
Dapper
Fix Released
Medium
MOTU

Bug Description

The NuFW team has identified a problem that could lead to Denial of Service from legitimate users of the authentication service.
The bug was found in user packet parsing. By sending several carefully badly formatted packets, an authenticated user can cause a denial of service on nuauth <= 1.0.15.

Changed in nufw:
assignee: nobody → motu
Changed in nufw:
assignee: nobody → motu
assignee: nobody → motu
Lukas Fittl (lfittl)
Changed in nufw:
status: Unconfirmed → Fix Released
Lukas Fittl (lfittl)
Changed in nufw:
status: Unconfirmed → Fix Released
Revision history for this message
Marco Rodrigues (gothicx) wrote :

Breezy support is over.. Today it's Breezy End Of Life!

Changed in nufw:
status: Unconfirmed → Rejected
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.