NATS Server panic via malicious compression on leafnode port

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. When configured to accept leafnode connections for a hub/spoke topology of multiple nats-servers, then the default configuration allows for...

GHSA-52JH-2XXH-PWH6 NATS Server panic via malicious compression on leafnode port

Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. When configured to accept leafnode connections for a hub/spoke topology of multiple nats-servers, then the default configuration allows for...

PT-2026-27619

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server provides a Nats-Request-Info: message header intended for account or user identification, allowing clients to make trust decisions based on...

PT-2026-27615

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.15 NATS-Server versions prior to 2.12.6 Description NATS-Server is a high-performance server for NATS.io, a cloud and edge native messaging system. A client connected to the leafnode port can crash the server...

PT-2026-27612

Name of the Vulnerable Software and Affected Versions NATS-Server versions prior to 2.11.14 NATS-Server versions prior to 2.12.5 Description NATS-Server, a high-performance messaging system, is susceptible to a server panic when configured as a leafnode. This occurs pre-authentication and require...

CVE-2005-1911

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...

EUVD-2004-2060

Malware in sbrugna...

EUVD-2003-0735

Malware in sbrugna...

EUVD-2005-1913

Malware in sbrugna...

EUVD-2002-1642

Malware in sbrugna...

SUSE CVE-2005-1911

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...

Operating System (OS) Detection (NNTP)

NNTP server based Operating System OS detection. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

leafnode fetchnews DoS

According to its version number, the remote Leafnode NNTP server is vulnerable to a denial of service attack. Specifically, it may hang without consuming CPU when attempting to read a news article with missing mandatory headers. This means that news will not be updated until the fetchnews process...

leafnode Cross-Posted Article Group Name Prefix DoS

According to its version number, the remote Leafnode NNTP server is vulnerable to a denial of service attack. Specifically, it may go into an infinite loop with 100% CPU use when an article that has been crossposted to several groups, one of which is the prefix of another, and when this article i...

FreeBSD : leafnode fetchnews denial-of-service triggered by truncated transmission (a051a4ec-3aa1-4dd1-9bdc-a61eb5700153)

When a downloaded news article ends prematurely, i. e. when the server sends CRLF.CRLF before sending a blank line, fetchnews may wait indefinitely for data that never arrives. Workaround: configure 'minlines=1' or use a bigger value in the configuration file. Found by Toni Viemero. %NASLMINLEVEL...

FreeBSD Ports: leafnode

The remote host is missing an update to the system as announced in the referenced advisory. VID b5ffaa2a-ee50-4498-af99-61bc1b163c00 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: leafnode

The remote host is missing an update to the system as announced in the referenced advisory. VID 7b0208ff-3f65-4e16-8d4d-48fd9851f085 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: leafnode

The remote host is missing an update to the system as announced in the referenced advisory. VID f7a3b18c-624c-4703-9756-b6b27429e5b0 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: leafnode

The remote host is missing an update to the system as announced in the referenced advisory. VID a051a4ec-3aa1-4dd1-9bdc-a61eb5700153 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: leafnode

The remote host is missing an update to the system as announced in the referenced advisory. VID 66dbb2ee-99b8-45b2-bb3e-640caea67a60 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...