oss-sec mailing list archives

Re: CVE Id Request: fetchmail <= 6.3.8 DoS when logging long headers in -v -v mode


From: Tomas Hoger <thoger () redhat com>
Date: Mon, 23 Jun 2008 12:34:31 +0200

On Fri, 13 Jun 2008 18:11:02 +0200 Matthias Andree
<matthias.andree () gmx de> wrote:

Summary: fetchmail crashes (SIGSEGV while reading) in -v -v mode when
trying to format log messages exceeding 2048 bytes.

Reference: <https://bugzilla.novell.com/show_bug.cgi?id=354291>

Just out of curiosity, has anyone managed to reproduce this on any
other arch than x86_64?  i386 does not seem affected by this at all,
while on x86_64 it SEGVs on some glibc versions and prints "About to
rewrite To: (null)" with no crash on others.

-- 
Tomas Hoger / Red Hat Security Response Team


Current thread: