------------------------------------------------------------------------
Debian Security Advisory DSA-104-1                   security@debian.org 
Debian -- Security Information                          Wichert Akkerman
January 14, 2002
------------------------------------------------------------------------


Package        : cipe
Problem type   : DoS attack
Debian-specific: no

Larry McVoy found a bug in the packet handling code for the CIPE
VPN package: it did not check if a received packet was too short
and could crash.

This has been fixed in version 1.3.0-3, and we recommend that you
upgrade your cipe packages immediately.

Please note that the package only contains the needed kernel patch,
you will have to build the kernel modules for your kernel with the
updated source from the cipe-source package.

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.


Debian GNU/Linux 2.2 alias potato
---------------------------------

  Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

  Source archives:
      
      MD5 checksum: afbeeab103f402414c22bc039dff7984
      
      MD5 checksum: f573894eaab254cacd5a256e22423a8e
      
      MD5 checksum: 01269317d3c387713f40b18f73514fb6

  Architecture independent archives:
     
 
      MD5 checksum: bbfe46765a76bce4f4ce6f9855eee717
     
 
      MD5 checksum: c380864ae382aff742f08869f89848f6

  These packages will be moved into the stable distribution on its next
  revision.

--
----------------------------------------------------------------------------
apt-get: deb  Debian -- Security Information  stable/updates main
dpkg-ftp:    dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org

Debian: 'cipe' DoS attack vulnerability

January 14, 2002
Larry McVoy found a bug in the packet handling code for the CIPEVPN package: it did not check if a received packet was too shortand could crash.

Summary

Package : cipe
Problem type : DoS attack
Debian-specific: no

Larry McVoy found a bug in the packet handling code for the CIPE
VPN package: it did not check if a received packet was too short
and could crash.

This has been fixed in version 1.3.0-3, and we recommend that you
upgrade your cipe packages immediately.

Please note that the package only contains the needed kernel patch,
you will have to build the kernel modules for your kernel with the
updated source from the cipe-source package.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.


Debian GNU/Linux 2.2 alias potato
---------------------------------

Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

Source archives:

MD5 checksum: afbeeab103f402414c22bc039dff7984

MD5 checksum: f573894eaab254cacd5a256e22423a8e

MD5 checksum: 01269317d3c387713f40b18f73514fb6

Architecture independent archives:


MD5 checksum: bbfe46765a76bce4f4ce6f9855eee717


MD5 checksum: c380864ae382aff742f08869f89848f6

These packages will be moved into the stable distribution on its next
revision.

--
----------------------------------------------------------------------------
apt-get: deb Debian -- Security Information stable/updates main
dpkg-ftp: dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org






Severity

Related News

23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved