[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201402181209.s1IC9bX2004678@linus.mitre.org>
Date: Tue, 18 Feb 2014 07:09:37 -0500 (EST)
From: cve-assign@...re.org
To: fw@...eb.enyo.de
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request: freeradius denial of service in rlm_pap hash processing
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> SSHA (and presumably SSHA) processing runs into a stack-based buffer
> overflow in the freeradius rlm_pap module if the password source uses
> an unusually long hashed password
> http://lists.freebsd.org/pipermail/freebsd-bugbusters/2014-February/000610.html
> https://github.com/FreeRADIUS/freeradius-server/commit/0d606cfc29a.patch
> https://github.com/FreeRADIUS/freeradius-server/commit/ff5147c9e5088c7.patch
> https://github.com/FreeRADIUS/freeradius-server/commit/f610864d4c8f51d.patch
Use CVE-2014-2015.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJTA0vZAAoJEKllVAevmvmsO1AH/2JorTtiL73XUWNRXRCkwPTb
TVSio3o53e8lUJfYdqRt0qG9KkjUSnPwHkQgWZTRZwyrFBJznqJ3bvFYSLYZXq3y
XdtUQ256wpW8vyGWxJtRCx0N+OGWpN2Y/bDh6TuMVGALCPm7avRrMUUFWOSMp+Jo
nwVw5raIzssFFQigSL7MxO/Pg9kns1fZuOkA3hZLGdEEc5cnldIdXr+LyuBkkDiL
WPuzSly2flWXWmnZFk5Ki1lAm6rVcL8hz4HvF6WYuLgL68MNfsBSmaNs7bgJBLnP
h1PcOKOCkyQMgPZflPhgQkFHUtirX2DEz3AyGN1qux6BFbIATZIu0OAyYbDhT/Q=
=KOVs
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
