|
Message-ID: <CA+PdXctggn-AoYVKJQZS=+jbnEga4P2AkJa6OJaAS_GUgw0b_g@mail.gmail.com> Date: Mon, 7 Aug 2017 08:47:35 -0400 From: Glenn Randers-Pehrson <glennrp@...il.com> To: oss-security@...ts.openwall.com Subject: Re: Cve issue discussion It's not causing a crash, just a delay. You'll safely get either an OOM message or an EOF message.and no memory leak. Glenn On Mon, Aug 7, 2017 at 8:37 AM, Marcus Meissner <meissner@...e.de> wrote: > Hi, > > if it could crash the image reader I would consider it "remote denial of service" > classed and CVE worthy.
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.