Actions
Bug #2860
closedCVE-2013-4180 - Potential DoS in HostsController
Description
HostController#power and HostController#ipmi_boot convert user input to symbol which could lead to memory exhaustion. Patch already sent, so setting Ready For Testing status.
Files
Updated by Dominic Cleal about 11 years ago
- File 0001-fixes-2860-don-t-convert-arbitrary-input-into-symbol.patch 0001-fixes-2860-don-t-convert-arbitrary-input-into-symbol.patch added
- Status changed from Ready For Testing to Pending
Patch ACKed by me, pending merge with 1.2.1 release.
Updated by Marek Hulán about 11 years ago
- Subject changed from Potential DoS in HostsController to CVE-2013-4180 - Potential DoS in HostsController
Updated by Dominic Cleal about 11 years ago
- Target version changed from 1.2.1 to 1.2.2
Updated by Marek Hulán almost 11 years ago
- Status changed from Pending to Closed
- % Done changed from 0 to 100
Applied in changeset d370f4aac4efab233371d243e1414f843d6dcae6.
Actions