| Package | Affected versions | Patched versions |
|---|---|---|
| linux diskquota | = 2.0= 3.01= 3.02= 3.03= 3.04= 3.05= 3.06= 3.07= 3.08= 3.09= 3.10= 3.11= 3.12= 3.13= 3.14= 3.15≤ 3.16 |
The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free