[SECURITY] [DSA 2645-1] inetutils security update

2013-03-1421:17:24

lists.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.8%

JSON

Debian Security Advisory DSA-2645-1 [email protected]
http://www.debian.org/security/ Yves-Alexis Perez
March 14, 2013 http://www.debian.org/security/faq

Package : inetutils
Vulnerability : denial of service
Problem type : remote
Debian-specific: no
CVE ID : CVE-2010-2529
Debian Bug :

Ovidiu Mara reported in 2010 a vulnerability in the ping util, commonly used by
system and network administrators. By carefully crafting ICMP responses, an
attacker could make the ping command hangs.

For the stable distribution (squeeze), this problem has been fixed in
version 2:1.6-3.1+squeeze2.

For the testing distribution (wheezy), this problem has been fixed in
version 2:1.9-2.

For the unstable distribution (sid), this problem has been fixed in
version 2:1.9-2.

We recommend that you upgrade your inetutils packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6kfreebsd-i386inetutils-tools< 2:1.6-3.1+squeeze2inetutils-tools_2:1.6-3.1+squeeze2_kfreebsd-i386.deb
Debian5amd64iputils-ping< 3:20071127-1+lenny1iputils-ping_3:20071127-1+lenny1_amd64.deb
Debian6kfreebsd-amd64inetutils-talkd< 2:1.6-3.1+squeeze2inetutils-talkd_2:1.6-3.1+squeeze2_kfreebsd-amd64.deb
Debian6sparcinetutils-telnet< 2:1.6-3.1+squeeze2inetutils-telnet_2:1.6-3.1+squeeze2_sparc.deb
Debian5armiputils-tracepath< 3:20071127-1+lenny1iputils-tracepath_3:20071127-1+lenny1_arm.deb
Debian5ia64iputils-tracepath< 3:20071127-1+lenny1iputils-tracepath_3:20071127-1+lenny1_ia64.deb
Debian6s390inetutils-ftpd< 2:1.6-3.1+squeeze2inetutils-ftpd_2:1.6-3.1+squeeze2_s390.deb
Debian6armelinetutils-inetd< 2:1.6-3.1+squeeze2inetutils-inetd_2:1.6-3.1+squeeze2_armel.deb
Debian6kfreebsd-amd64inetutils-ping< 2:1.6-3.1+squeeze2inetutils-ping_2:1.6-3.1+squeeze2_kfreebsd-amd64.deb
Debian5armeliputils-ping< 3:20071127-1+lenny1iputils-ping_3:20071127-1+lenny1_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	kfreebsd-i386	inetutils-tools	< 2:1.6-3.1+squeeze2	inetutils-tools_2:1.6-3.1+squeeze2_kfreebsd-i386.deb
Debian	5	amd64	iputils-ping	< 3:20071127-1+lenny1	iputils-ping_3:20071127-1+lenny1_amd64.deb
Debian	6	kfreebsd-amd64	inetutils-talkd	< 2:1.6-3.1+squeeze2	inetutils-talkd_2:1.6-3.1+squeeze2_kfreebsd-amd64.deb
Debian	6	sparc	inetutils-telnet	< 2:1.6-3.1+squeeze2	inetutils-telnet_2:1.6-3.1+squeeze2_sparc.deb
Debian	5	arm	iputils-tracepath	< 3:20071127-1+lenny1	iputils-tracepath_3:20071127-1+lenny1_arm.deb
Debian	5	ia64	iputils-tracepath	< 3:20071127-1+lenny1	iputils-tracepath_3:20071127-1+lenny1_ia64.deb
Debian	6	s390	inetutils-ftpd	< 2:1.6-3.1+squeeze2	inetutils-ftpd_2:1.6-3.1+squeeze2_s390.deb
Debian	6	armel	inetutils-inetd	< 2:1.6-3.1+squeeze2	inetutils-inetd_2:1.6-3.1+squeeze2_armel.deb
Debian	6	kfreebsd-amd64	inetutils-ping	< 2:1.6-3.1+squeeze2	inetutils-ping_2:1.6-3.1+squeeze2_kfreebsd-amd64.deb
Debian	5	armel	iputils-ping	< 3:20071127-1+lenny1	iputils-ping_3:20071127-1+lenny1_armel.deb