PT-2016-7957 · Vtun · Vtun

Published 2016-04-25 · Updated 2016-04-25

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions vtun versions prior to 3.0.3

Description A vulnerability was found in the vtun package. When a SIGHUP is sent to a vtun client process and it cannot connect to the remote server, vtun attempts to reconnect without a sleep period between each attempt. As a result, the vtun process consumes a significant amount of CPU and writes to syslog without limit.

Recommendations For versions prior to 3.0.3, update to version 3.0.3 to fix this issue and other bugs.

Related Identifiers

MGASA-2016-0146

Affected Products

Vtun

References · 4

• https://advisories.mageia.org/MGASA-2016-0146.html · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0146 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2016-April/181383.html · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=18135 · Note