Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 23 Dec 2013 15:19:54 -0500 (EST)
From: cve-assign@...re.org
To: vdanen@...hat.com
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com, carnil@...ian.org
Subject: Re: CVE request: denial of service in Nagios (process_cgivars())

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> http://sourceforge.net/p/nagios/nagioscore/ci/d97e03f32741a7d851826b03ed73ff4c9612a866/

Relative to CVE-2013-7108, Nagios changed two files that Icinga did
not change. If the additional changes are vulnerability fixes, we will
assign two more CVE IDs. (The vulnerability types would not be the
same.) We are currently coordinating with Icinga upstream on this. In
any case, CVE-2013-7108 will represent a set of off-by-one error
issues that are common to Icinga and Nagios, and were all announced at
the same time. CVE-2013-7108 is not specific to only Icinga.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJSuJoTAAoJEKllVAevmvmsyM4H/1x5l2PIC4gqguCMgegrR1X4
c8/kAkjxV1JoTFPYZhjyw5/fKtlZ/5f2QNmP00mZcWKEf2466jRuRb6mm3LNwdPC
rnheq4iaIFMi+KGksEMvb1cmO0VC4kEB7gnFMyfFNG6R3CVOLlsbaAiDovJR+ZXJ
RfDcqTYFqpV3BMsTmbFs8C/72KOtED2ZBoRW/hTBUh8lz3E8kud68cjXhddrRXFB
MDmmmHiaFwJ/4nR2LwFdap5iHUJ87YaezrFKCl75bVtVYBqPtnLaI9jOwUKkB5sf
FDeK+6AoKsEhWEYLyqLrHIu6vyIRs3QTbxZ7w9PRUXILnfTz4btG8laUgKBWdNc=
=HvwP
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.