id sequence is predictable and the same in all child processes
Bug #125180 reported by
Scott Kitterman
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| libnet-dns-perl (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
| Dapper |
Fix Released
|
High
|
Scott Kitterman | ||
| Edgy |
Fix Released
|
High
|
Scott Kitterman | ||
| Feisty |
Fix Released
|
High
|
Scott Kitterman | ||
Bug Description
Binary package hint: libnet-dns-perl
In /lib/Net/
{
my $id = int rand(MAX_ID);
sub nextid {
return $id++ % (MAX_ID + 1);
}
}
Results in a predcitable id sequence.
CVE References
Revision history for this message
| Scott Kitterman (kitterman) wrote | #1 |
| Changed in libnet-dns-perl: | |
| importance: | Undecided → High |
| status: | New → Fix Released |
| Changed in libnet-dns-perl: | |
| assignee: | nobody → kitterman |
| importance: | Undecided → High |
| status: | New → In Progress |
| assignee: | nobody → kitterman |
| importance: | Undecided → High |
| status: | New → In Progress |
| assignee: | nobody → kitterman |
| importance: | Undecided → High |
| status: | New → In Progress |
Revision history for this message
| Scott Kitterman (kitterman) wrote | #2 |
Revision history for this message
| Scott Kitterman (kitterman) wrote | #3 |
Revision history for this message
| Scott Kitterman (kitterman) wrote | #4 |
Revision history for this message
| Scott Kitterman (kitterman) wrote | #5 |
Revision history for this message
| Kees Cook (kees) wrote | #6 |
| Changed in libnet-dns-perl: | |
| status: | In Progress → Fix Released |
| status: | In Progress → Fix Released |
| status: | In Progress → Fix Released |
To post a comment you must log in.
Already fixed in Gutsy.