A vulnerability has been reported in Honeyd, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an unspecified error when processing ARP packets. Successful exploitation crashes the daemon. The vulnerability has been reported in versions prior to 1.5b. Solution: Update to version 1.5b.
netmon guys, please bump to 1.5b if possible
New version is in the tree. Arch teams, seems it's time to stabilize. Do not forget libdnsres dependency ;) ppc and sparc: You have a bit more work to be done :) You need to test that libdnesres at least compiles at your arch. Till then honeyd and libdnsres do not have even ~keyword.
Thx pva.
libdnsres-0.1a-r1 fails to compile if libdnsres is not already installed on the system and MAKEOPTS is greater than -j1. Basically part of the build process is trying to link to -ldnsres before it has been built.
Weeve: IIUYC adding -j1 to emake is enough to fix the problem and I already did this in the tree. BTW. I did not manage to reproduce your problem on either x86 or amd64 with different -j#. But both my systems have only 1 cpu... :)
libdnsres: 1) emerges fine with MAKEOPTS="-j1" see other comment, otherwise it fails with [...] (cd .libs && rm -f libdnsres.so.0 && ln -s libdnsres.so.0.0.1 libdnsres.so.0) (cd .libs && rm -f libdnsres.so && ln -s libdnsres.so.0.0.1 libdnsres.so) i686-pc-linux-gnu-gcc -Wall -O0 -g -DRESOLVSORT -O2 -Wall -o simple_test simple_test.o -L/var/tmp/portage/libdnsres-0.1a-r1/work/libdnsres-0.1a -ldnsres -L/usr/lib /usr/lib/libevent.so /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../../i686-pc-linux-gnu/bin/ld: cannot find -ldnsres honeyd: 1) emerges fine 2) passes collision test 3) starts up Portage 2.1-r2 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.3.6-r4, 2.6.17-gentoo-r4 i686) ================================================================= System uname: 2.6.17-gentoo-r4 i686 AMD Athlon(tm) XP 2500+ Gentoo Base System version 1.12.4 app-admin/eselect-compiler: [Not Present] dev-lang/python: 2.4.3-r1 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: [Not Present] dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.1-r3 sys-devel/gcc-config: 1.3.13-r3 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/X11/xkb" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/splash /etc/terminfo" CXXFLAGS="-O2" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache collision-protect distlocks metadata-transfer parallel-fetch sandbox sfperms strict test" GENTOO_MIRRORS="ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo/" LANG="de_DE@euro" LC_ALL="de_DE@euro" LINGUAS="de" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.informatik.rwth-aachen.de/gentoo-portage" USE="x86 3dnow 3dnowext X Xaw3d a52 alsa arts artworkextra asf audiofile avi bash-completion beagle berkdb bidi bitmap-fonts bootsplash branding bzip2 cairo cdda cddb cdparanoia cdr cli cracklib crypt css cups curl custom-cflags dbus dga directfb divx4linux dlloader dri dts dvd dvdr dvdread dvi eds emacs emboss encode esd evo exif expat fam fat fbcon ffmpeg firefox foomaticdb fortran ftp gb gcj gdbm gif gnome gpm gstreamer gtk gtk2 gtkhtml hal icq idn imagemagick imap imlib ipv6 isdnlog java javascript jikes jpeg jpeg2k ldap leim libg++ libwww lm_sensors mad maildir matroska mbox mikmod mime mmx mmxext mng mono motif mp3 mpeg mpeg2 mule nautilus ncurses nforce2 nls nocardbus nptl nptlonly nsplugin nvidia objc ogg opengl pam pcre pdf pdflib perl plotutils pmu png ppds pppd preview-latex print python qt3 qt4 quicktime readline reflection reiserfs samba sdk session slang spell spl sse ssl svg svga t1lib tcltk tcpd tetex theora thunderbird tiff truetype truetype-fonts type1-fonts udev usb vcd videos vorbis win32codecs wmf wxwindows xine xml xorg xosd xv xvid zlib elibc_glibc input_devices_mouse input_devices_keyboard kernel_linux linguas_de userland_GNU video_cards_radeon video_cards_vesa video_cards_fbdev" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS
(In reply to comment #6) > libdnsres: > 1) emerges fine with MAKEOPTS="-j1" see other comment, otherwise it fails > with Christian: Did I understand you correctly, that -j1 that I added inside ebuild does not help you? Check ebuild, please.
(In reply to comment #7) > (In reply to comment #6) > > libdnsres: > > 1) emerges fine with MAKEOPTS="-j1" see other comment, otherwise it fails > > with > Christian: Did I understand you correctly, that -j1 that I added inside ebuild > does not help you? Check ebuild, please. Yes, after a resync it works fine. And btw I wrote my comment before you, but you commited it faster. :)
Both libdnsres-0.1a-r1 and honeyd-1.5b marked stable on x86. Peter, it's not a good idea to do a revision bump which fixes build-time error like this one - those who already have it installed do not care, thus they will be updating pointlessly.
(In reply to comment #9) > Peter, it's not a good idea to do a revision bump which fixes build-time error May be I'm wrong and I still have very basic understanding about this PIC things but... The library compiled from libdnsres-0.1a on x86 have the following QA warning at the end of emerge: QA Notice: the following files contain runtime text relocations Text relocations force the dynamic linker to perform extra work at startup, waste system resources, and may pose a security risk. On some architectures, the code may not even function properly, if at all. For more information, see http://hardened.gentoo.org/pic-fix-guide.xml Please include this file in your report: /porttmp/portage/libdnsres-0.1a/temp/scanelf-textrel.log "TEXTREL usr/lib/libdnsres.so.0.0.1" The problem was that during build process both libtool and non-libtool objects were linked into /libdnsres.so.0.0.1. I fixed this and I think all users may wish to have PIC binary without text relocations. That was the reason for revbump.
(re-)added ~ppc.
I've ~sparc'd the ebuilds but need another day or so to finish testing.
Removing amd64 from CC since we don't have any version of honeyd stable.
Houston, all engines are SPARC...
This one is ready for GLSA decision.
netmon team vote NO. This is just arp DOS. The service honeyd is not critical and vulnerability could be exploited only inside local ethernet segment.
local subnet ==> i vote no.
Voting NO and closing. Feel free to reopen if you disagree.
