Summary
Ryan Finnie discovered that the rsync daemon incorrectly handled invalid
usernames. A remote attacker could use this issue to cause rsync to consume
resources, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | rsync | 3.1.0-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of ser…
References
-
report
https://ubuntu.com/security/CVE-2014-2855