[ GLSA 201412-20 ] GNUstep Base library: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: GNUstep Base library: Denial of Service (GLSA 201412-20)
Severity: normal
Exploitable: remote
Date: December 13, 2014
Bug(s): #508370
ID: 201412-20

Synopsis

A vulnerability in GNUstep Base library could lead to Denial of
Service.


Background

GNUstep Base library is a free software package implementing the API of
the OpenStep Foundation Kit (tm), including later additions.


Affected Packages

Package: gnustep-base/gnustep-base
Vulnerable: < 1.24.6-r1
Unaffected: >= 1.24.6-r1
Architectures: All supported architectures


Description

GNUstep Base library does not properly handle the file descriptor for
logging, when run as a daemon.


Impact

A remote attacker could send a specially crafted request, possibly
resulting in a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All GNUstep Base library users should upgrade to the latest version: