Bug 830248 (CVE-2012-2685)

Summary: CVE-2012-2685 cumin: DoS via large image requests
Product: [Other] Security Response Reporter: Vincent Danen <vdanen>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: fweimer, grid-maint-list, security-response-team, sgraf, tmckay
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 840118 (view as bug list) Environment:
Last Closed: 2021-10-19 21:53:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 840118, 858868    
Bug Blocks: 808230, 828434, 828935    

Description Vincent Danen 2012-06-08 16:06:03 UTC
Florian Weimer reported a denial of service condition in Cumin.  Clients could request images of an arbitrary size, which would lead to large memory allocations on the server.  This could lead to an out of memory condition, which could potentially consume all available memory on the Cumin server.

Comment 2 Trevor McKay 2012-06-08 17:15:53 UTC
Note, this flaw no longer exists on trunk, but it does exist in previous releases.

Comment 3 Vincent Danen 2012-09-19 15:57:57 UTC
Acknowledgements:

This issue was discovered by Florian Weimer of the Red Hat Product Security Team.

Comment 4 errata-xmlrpc 2012-09-19 17:43:49 UTC
This issue has been addressed in following products:

  MRG for RHEL-5 v. 2

Via RHSA-2012:1278 https://rhn.redhat.com/errata/RHSA-2012-1278.html

Comment 5 errata-xmlrpc 2012-09-19 17:52:55 UTC
This issue has been addressed in following products:

  MRG for RHEL-6 v.2

Via RHSA-2012:1281 https://rhn.redhat.com/errata/RHSA-2012-1281.html

Comment 6 Vincent Danen 2012-09-19 21:10:40 UTC
Created cumin tracking bugs for this issue

Affects: fedora-all [bug 858868]