CVE

Id
70150  
CVE No.
CVE-2014-2855  
Status
Candidate  
Description
The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.  
Phase
Assigned (20140415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
668871 70150 CVE-2014-2855 MLIST:[oss-security] 20140414 CVE Request: rsync denial of service  View
668872 70150 CVE-2014-2855 URL:http://www.openwall.com/lists/oss-security/2014/04/14/5  View
668873 70150 CVE-2014-2855 MLIST:[oss-security] 20140415 Re: CVE Request: rsync denial of service  View
668874 70150 CVE-2014-2855 URL:http://www.openwall.com/lists/oss-security/2014/04/15/1  View
668875 70150 CVE-2014-2855 CONFIRM:https://bugs.launchpad.net/ubuntu/+source/rsync/+bug/1307230  View
668876 70150 CVE-2014-2855 CONFIRM:https://bugzilla.samba.org/show_bug.cgi?id=10551  View
668877 70150 CVE-2014-2855 CONFIRM:https://git.samba.org/?p=rsync.git;a=commit;h=0dedfbce2c1b851684ba658861fe9d620636c56a  View
668878 70150 CVE-2014-2855 CONFIRM:http://advisories.mageia.org/MGASA-2015-0065.html  View
668879 70150 CVE-2014-2855 FEDORA:FEDORA-2014-5315  View
668880 70150 CVE-2014-2855 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131910.html  View
668881 70150 CVE-2014-2855 MANDRIVA:MDVSA-2015:131  View
668882 70150 CVE-2014-2855 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:131  View
668883 70150 CVE-2014-2855 SUSE:openSUSE-SU-2014:0595  View
668884 70150 CVE-2014-2855 URL:http://lists.opensuse.org/opensuse-updates/2014-05/msg00006.html  View
668885 70150 CVE-2014-2855 SECUNIA:57948  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13286 JVNDB-2014-002161 PaperThin CommonSpot における絶対パストラバーサルの脆弱性 PaperThin CommonSpot には、絶対パストラバーサルの脆弱性が存在します。 CVE-2014-2863 70150 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002161.html  View