GLSA-200904-13 : Ventrilo: Denial of Service
Medium Nessus Plugin ID 36157
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-200904-13 (Ventrilo: Denial of Service)
Luigi Auriemma reported a NULL pointer dereference in Ventrilo when processing packets with an invalid version number followed by another packet.
A remote attacker could send specially crafted packets to the server, resulting in a crash.
There is no known workaround at this time.
SolutionAll Ventrilo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=media-sound/ventrilo-server-bin-3.0.3'