oss-security - CVE request: another glibc flaw, similar to CVE-2013-1914, but in AF

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20131022224204.GC2810@redhat.com>
Date: Tue, 22 Oct 2013 16:42:04 -0600
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: another glibc flaw, similar to CVE-2013-1914, but in
 AF_INET6

It was found that the CVE-2013-1914 fix in glibc for AF_UNSPEC missed a
an identical case but with AF_INET6.  Could a CVE be assigned to this?
This issue has the same impact as CVE-2013-1914.

References:

https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html
https://bugzilla.redhat.com/show_bug.cgi?id=1022280

Thanks.

-- 
Vincent Danen / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.