PT-2016-7957 · Vtun · Vtun

Publicado 2016-04-25 · Atualizado 2016-04-25

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions vtun versions prior to 3.0.3

Description A vulnerability was found in the vtun package. When a SIGHUP is sent to a vtun client process and it cannot connect to the remote server, vtun attempts to reconnect without a sleep period between each attempt. As a result, the vtun process consumes a significant amount of CPU and writes to syslog without limit.

Recommendations For versions prior to 3.0.3, update to version 3.0.3 to fix this issue and other bugs.

Identificadores relacionados

MGASA-2016-0146

Produtos afetados

Vtun

Referências · 4

• https://advisories.mageia.org/MGASA-2016-0146.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2016-0146 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=18135 · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2016-April/181383.html · Aviso do Fabricante