openSUSE Security Update : atheme (openSUSE-2017-456)

This update for atheme fixes the following issues : - CVE-2017-6384: Memory leak in the loginuser function allowing for DoS boo1027614 - Use after free that could potentially be used by an attacker already having the privilege to use SASL impersonation to cause a denial of service. This update al...

Atheme IRC DoS Vulnerability

Atheme is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atheme:atheme"; if...

CVE-2017-6384

CVE-2017-6384 affects Atheme up to version 7.2.7 where a memory leak in the login_user function (saslserv/main.c in saslserv/main.so) allows a remote unauthenticated attacker to cause a denial of service by consuming memory. Impact is a DoS without confidentiality or integrity loss per the provid...

CVE-2017-6384

Memory leak in the loginuser function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8...