Lucene search

K
mageiaGentoo FoundationMGASA-2014-0080
HistoryFeb 17, 2014 - 4:22 a.m.

Updated denyhosts package fixes security vulnerability

2014-02-1704:22:31
Gentoo Foundation
advisories.mageia.org
13

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.325 Low

EPSS

Percentile

97.1%

Helmut Grohne discovered that denyhosts, a tool preventing SSH brute-force attacks, could be used to perform remote denial of service against the SSH daemon. Incorrectly specified regular expressions used to detect brute force attacks in authentication logs could be exploited by a malicious user to forge crafted login names in order to make denyhosts ban arbitrary IP addresses (CVE-2013-6890). This update also includes a fix for a regression introduced when fixing CVE-2013-6890.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchdenyhosts< 2.6-4.4denyhosts-2.6-4.4.mga3

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.325 Low

EPSS

Percentile

97.1%