oss-security - CVE Request: vtun: denial-of-service: high CPU usage after SIGHUP

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160426052013.GA4299@lorien.valinor.li>
Date: Tue, 26 Apr 2016 07:20:13 +0200
From: Salvatore Bonaccorso <carnil@...ian.org>
To: OSS Security Mailinglist <oss-security@...ts.openwall.com>
Subject: CVE Request: vtun: denial-of-service: high CPU usage after SIGHUP

Hi

There exists a denial-of-service vulnerability in vtun, resulting in
high CPU usage after SIGHUP to a vtun client process.

Debian Bugreport: https://bugs.debian.org/818489 (contains proposed
patch)

Additional references:

https://bugzilla.redhat.com/show_bug.cgi?id=1319858
https://lists.fedoraproject.org/pipermail/package-announce/2016-April/181383.html

Could you assign a CVE for this issue?

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.