oss-security - CVE-2011-0714 kernel: deficiency in handling of invalid data packets in lockd

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1128362719.334929.1299613285898.JavaMail.root@zmail05.collab.prod.int.phx2.redhat.com>
Date: Tue, 8 Mar 2011 14:41:25 -0500 (EST)
From: Petr Matousek <pmatouse@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley@...us.mitre.org
Subject: CVE-2011-0714 kernel: deficiency in handling of invalid data
 packets in lockd

Hello,

Josh Bressers has assigned a CVE id CVE-2011-0714 to the following bug:

"It was found that lockd did not properly handle data packets that contained
invalid data. This could be possibly exploited by remote user to crash the
server (DoS)."

Please note that this issue only affects Red Hat Enterprise Linux 6 as a
result of an incomplete upstream commit backport.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=678144

Credits:
Adam Prince

Thanks,
--
Petr Matousek / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.