Lucene search

K
archlinuxArch LinuxASA-201411-5
HistoryNov 09, 2014 - 12:00 a.m.

konversation: denial of service

2014-11-0900:00:00
Arch Linux
lists.archlinux.org
17

EPSS

0.025

Percentile

90.2%

Konversation’s Blowfish ECB encryption support assumes incoming blocks
to be the expected 12 bytes. The lack of a sanity-check for the actual
size can cause a denial of service and an information leak to the local
user.

OSVersionArchitecturePackageVersionFilename
anyanyanykonversation< 1.5.1-1UNKNOWN