Description
Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49832 ↗
- http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be ↗
- http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html ↗
- http://www.ubuntu.com/usn/USN-875-1 ↗
- http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=468966 ↗
- http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html ↗