oss-security - Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 23 Jun 2008 12:34:31 +0200
From: Tomas Hoger <thoger@...hat.com>
To: oss-security@...ts.openwall.com
Cc: matthias.andree@....de
Subject: Re: CVE Id Request: fetchmail <= 6.3.8 DoS when
 logging long headers in -v -v mode

On Fri, 13 Jun 2008 18:11:02 +0200 Matthias Andree
<matthias.andree@....de> wrote:

> Summary: fetchmail crashes (SIGSEGV while reading) in -v -v mode when
> trying to format log messages exceeding 2048 bytes.
> 
> Reference: <https://bugzilla.novell.com/show_bug.cgi?id=354291>

Just out of curiosity, has anyone managed to reproduce this on any
other arch than x86_64?  i386 does not seem affected by this at all,
while on x86_64 it SEGVs on some glibc versions and prints "About to
rewrite To: (null)" with no crash on others.

-- 
Tomas Hoger / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.