oss-sec mailing list archives

Re: sysklogd vulnerability (CVE-2014-3634)

From: mancha <mancha1 () zoho com>
Date: Fri, 3 Oct 2014 15:39:07 +0000

On Fri, Oct 03, 2014 at 05:16:31PM +0200, Rainer Gerhards wrote:

Today is Germany's national holiday.  IIRC it was with 3500000000 or
350000001. I probably can't check today. I think it was on ubuntu 12.04lts
fully patched.

Sorry i have no better answer at the moment.


In that case, Schönen Feiertag.

Maybe when you have some time you can provide a bit more particulars. On
sysklogd, I'm not seeing it. But, the flaw does exist and there is OOB
access so there's no reason not to apply the fix.

--mancha

Attachment: _bin
Description:

Current thread:

sysklogd vulnerability (CVE-2014-3634) mancha (Oct 03)
- Re: sysklogd vulnerability (CVE-2014-3634) mancha (Oct 03)
  - Re: sysklogd vulnerability (CVE-2014-3634) Solar Designer (Oct 03)
    - Re: sysklogd vulnerability (CVE-2014-3634) Rainer Gerhards (Oct 03)
    - Re: sysklogd vulnerability (CVE-2014-3634) mancha (Oct 03)
    - Re: sysklogd vulnerability (CVE-2014-3634) Rainer Gerhards (Oct 03)
    - Re: sysklogd vulnerability (CVE-2014-3634) mancha (Oct 03)
    - Re: sysklogd vulnerability (CVE-2014-3634) Rainer Gerhards (Oct 05)
    - Re: sysklogd vulnerability (CVE-2014-3634) mancha (Oct 06)
    - Re: sysklogd vulnerability (CVE-2014-3634) mancha (Oct 03)