oss-security - Re: use-after-free in src/libnetfilter

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20150422104927.GA3547@salvia>
Date: Wed, 22 Apr 2015 12:49:27 +0200
From: Pablo Neira Ayuso <pablo@...filter.org>
To: oss-security@...ts.openwall.com, security@...ntu.com
Subject: Re: use-after-free in src/libnetfilter_cthelper.c

On Mon, Apr 20, 2015 at 07:57:10PM -0700, Seth Arnold wrote:
> Hello Pablo, all,
> 
> I noticed a use-after-free in src/libnetfilter_cthelper.c:

Someone else noticed already and this is already fixed in master:

commit d48012fa7718195e3f897b01a36e4ba249aa6dfc
Author: Christopher Horler <cshorler@...glemail.com>
Date:   Mon Dec 8 20:04:31 2014 +0000

    src: fix use after free
    
    Fixes: https://bugzilla.netfilter.org/show_bug.cgi?id=990

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.