Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
91
security advisorydenial of servicegentooGentoo GLSA-201406-23: DenyHosts Normal Severity Denial of Service
A vulnerability in DenyHosts could allow a remote attacker to create a Denial of Service condition.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201406-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: DenyHosts: Denial of Service Date: June 25, 2014 Bugs: #495130 ID: 201406-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability in DenyHosts could allow a remote attacker to create a Denial of Service condition. Background ========= DenyHosts is a script intended to be run by Linux system administratorsto help thwart SSH server attacks. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-admin/denyhosts < 2.6-r9 > = 2.6-r9 Description ========== DenyHosts does not properly define the regular expressions used when parsing SSH authentication logs. Impact ===== A remote attacker could possibly cause a Denial of Service condition via a crafted login name. Workaround ========= There is no known workaround at this time. Resolution ========= All DenyHost users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-admin/denyhosts-2.6-r9" References ========= [ 1 ] CVE-2013-6890 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-6890 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201406-23 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuringthe confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 26, 2014
Gentoo
87
security advisorysoftware updatedebianDebian DSA-2826-2 Critical: Denyhosts Regression Fix for Break-Ins
A regression has been found on the denyhosts packages fixing CVE-2013-6890. This regression could cause an attempted breakin attempt to be missed by denyhosts, which would then fail to enforce a ban. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2826-2
Jan 23, 2014
•Critical
Debian
87
security advisorydebianDoS attackDebian DSA-2826-1: Critical Denial Of Service Risk In Denyhosts
Helmut Grohne discovered that denyhosts, a tool preventing SSH brute-force attacks, could be used to perform remote denial of service against the SSH daemon. Incorrectly specified regular expressions used to detect brute force attacks in authentication logs could be exploited . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2826-1
Dec 22, 2013
•Critical
Debian
91
security advisorydenial of serviceremote exploitGentoo: GLSA-200710-14 Normal: DenyHosts Denial Of Service
DenyHosts does not correctly parse log entries, potentially causing a remote Denial of Service.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200710-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: DenyHosts: Denial of Service Date: October 13, 2007 Bugs: #181213 ID: 200710-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= DenyHosts does not correctly parse log entries, potentially causing a remote Denial of Service. Background ========= DenyHosts is designed to monitor SSH servers for repeated failed login attempts. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-admin/denyhosts < 2.6-r1 > = 2.6-r1 Description ========== Daniel B. Cid discovered that DenyHosts used an incomplete regular expression to parse failed login attempts, a different issue than GLSA 200701-01. Impact ===== A remote unauthenticated attacker can add arbitrary hosts into the blacklist, including the "all" keyword, by submitting specially crafted version identification strings to the SSH server banner. An attacker may use this to prevent legitimate users from accessing a host remotely. Workaround ========= There is no known workaround at this time. Resolution ========= All DenyHosts users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-admin/denyhosts-2.6-r1" References ========= [ 1 ] CVE-2007-4323 https://www.cve.org/CVERecord?id=CVE-2007-4323 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200710-14 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Oct 13, 2007
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!