SILC Server: Denial of service

SILC Server: Denial of service SILC Server is affected by a Denial of Service vulnerability. silc-server 2007-03-14 2007-03-14 169599 remote 1.0.2-r1 1.0.2-r1

SILC Server is a server for the Secure Internet Live Conferencing (SILC) protocol.

Frank Benkstein discovered a possible NULL pointer dereference in apps/silcd/command.c if a new channel is created without specifying a valid hmac or cipher algorithm name.

A remote attacker could cause the server to crash, resulting in a Denial of Service.

There is no known workaround at this time.

All SILC Server users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-im/silc-server-1.0.2-r1"

DerCorny vorlon vorlon