CVE-2012-3417

The CVE concerns the quota subsystem (Linux DiskQuota) prior to 3.17. The good_client function in rquotad (rquota_svc.c) can call hosts_ctl the first time without a host name, potentially bypassing TCP Wrappers rules in hosts.deny. Several connected advisories confirm affected packages and indica...