[Bug 930173] New: VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 934328] [libsolv] zypper in...

[Bug 930173] New: VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

older
[Bug 1056981] libidn2-0-32bit is...

bugzilla_noreply＠novell.com

8 May 2015 8 May '15

08:14

http://bugzilla.suse.com/show_bug.cgi?id=930173 Bug ID: 930173 Summary: VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening@forge.provo.novell.com Reporter: abergmann@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- http://seclists.org/oss-sec/2015/q2/388 CVE-2015-0847 in nbd-server From: Florian Weimer Date: Thu, 07 May 2015 22:45:33 +0200 nbd-server uses signal handlers incorrectly, which leads to a denial of service vulnerability. We have assigned CVE-2015-0847 to this vulnerability. This was first reported to the Debian security team by Tuomas Räsänen, but we did not think this warranted an embargo. More details are available upstream: http://sourceforge.net/p/nbd/mailman/message/34091218/ -- You are receiving this mail because: You are on the CC list for the bug.

Attachments:

attachment.htm (text/html — 2.8 KB)

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

8 May 8 May

08:15

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Alexander Bergmann changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |abergmann@suse.com Assignee|bnc-team-screening@forge.pr |ms@suse.com |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

11 May 11 May

07:31

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Marcus Schaefer changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|ms@suse.com |mpluskal@suse.com --- Comment #2 from Marcus Schaefer --- I'm not maintaining nbd. I jumped in to help when Kurt Garloff left the company but afaik Martin Pluskal took it over and cleaned it up greatly -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

08:29

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Martin Pluskal changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|mpluskal@suse.com |bnc-team-screening@forge.pr | |ovo.novell.com --- Comment #3 from Martin Pluskal --- While I am not maintainer of nbd, I created sr for factory (nbd-3.10), backporting patches for maint update of old nbd (nbd-3.3) seems to be beyond my capabilities. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

09:02

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Chenzi Cao changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |chcao@suse.com Assignee|bnc-team-screening@forge.pr |tabraham@suse.com |ovo.novell.com | --- Comment #4 from Chenzi Cao --- Hi Tom, would you please help to have a look at this issue? Thank you! -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22 May 22 May

12:02

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Martin Pluskal changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |mpluskal@suse.com Resolution|--- |DUPLICATE --- Comment #6 from Martin Pluskal --- Created https://build.opensuse.org/request/show/308367 and *** This bug has been marked as a duplicate of bug 931987 *** -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13:01

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Martin Pluskal changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|DUPLICATE |FIXED --- Comment #8 from Martin Pluskal --- I am clumsy on fridays, it is obviously different issue. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

26 Feb 26 Feb

07:02

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com, | |security-team@suse.de Alias| |CVE-2015-0847 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

27 Aug 27 Aug

13:41

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Andreas Hasenkopf changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| maint:planned:update |CVSSv2:NVD:CVE-2015-0847:7. |CVSSv2:NVD:CVE-2015-0847:7. |8:(AV:N/AC:L/Au:N/C:N/I:N/A |8:(AV:N/AC:L/Au:N/C:N/I:N/A |:C) |:C) |CVSSv2:RedHat:CVE-2015-0847 |CVSSv2:RedHat:CVE-2015-0847 |:5.7:(AV:A/AC:M/Au:N/C:N/I: |:5.7:(AV:A/AC:M/Au:N/C:N/I: |N/A:C) |N/A:C) | -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

28 Aug 28 Aug

14:53

New subject: [Bug 930173] VUL-0: CVE-2015-0847: nbd: incorrect signal handling DoD

http://bugzilla.suse.com/show_bug.cgi?id=930173 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|CVSSv2:NVD:CVE-2015-0847:7. |CVSSv2:NVD:CVE-2015-0847:7. |8:(AV:N/AC:L/Au:N/C:N/I:N/A |8:(AV:N/AC:L/Au:N/C:N/I:N/A |:C) |:C) |CVSSv2:RedHat:CVE-2015-0847 |CVSSv2:RedHat:CVE-2015-0847 |:5.7:(AV:A/AC:M/Au:N/C:N/I: |:5.7:(AV:A/AC:M/Au:N/C:N/I: |N/A:C) |N/A:C) maint:planned:update -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

1703

Age (days ago)

3276

Last active (days ago)

Download

9 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com