[Bug 1797087] New: CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
3:09 p.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Bug ID: 1797087
Summary: CVE-2020-2100 jenkins: UDP multicast/broadcast service
amplification reflection attack
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: abenaiss(a)redhat.com, adam.kaplan(a)redhat.com,
aos-bugs(a)redhat.com, bmontgom(a)redhat.com,
eparis(a)redhat.com, extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jokerman(a)redhat.com,
mizdebsk(a)redhat.com, msrb(a)redhat.com,
nstielau(a)redhat.com, pbhattac(a)redhat.com,
sponnaga(a)redhat.com, vbobade(a)redhat.com,
wzheng(a)redhat.com
Target Milestone: ---
Classification: Other
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP
amplification reflection denial of service attack on port 33848.
References:
https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1641
http://www.openwall.com/lists/oss-security/2020/01/29/1
--
You are receiving this mail because:
You are on the CC list for the bug.
3:10 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Pedro Sampaio <psampaio(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1797088
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1797088
[Bug 1797088] CVE-2020-2100 jenkins: UDP multicast/broadcast service
amplification reflection attack [fedora-all]
--
You are receiving this mail because:
You are on the CC list for the bug.
3:10 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
--- Comment #1 from Pedro Sampaio <psampaio(a)redhat.com> ---
Created jenkins tracking bugs for this issue:
Affects: fedora-all [bug 1797088]
--
You are receiving this mail because:
You are on the CC list for the bug.
3:13 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Pedro Sampaio <psampaio(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1797089
--
You are receiving this mail because:
You are on the CC list for the bug.
7:46 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Sam Fowler <sfowler(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1797143
--
You are receiving this mail because:
You are on the CC list for the bug.
7:51 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Sam Fowler <sfowler(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1797144
--
You are receiving this mail because:
You are on the CC list for the bug.
7:53 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Sam Fowler <sfowler(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1797146
--
You are receiving this mail because:
You are on the CC list for the bug.
3:06 a.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
--- Comment #4 from Akram Ben Aissi <abenaiss(a)redhat.com> ---
This bug has been fixed by https://errata.devel.redhat.com/advisory/50532 that
brought Jenkins 2.204.2
--
You are receiving this mail because:
You are on the CC list for the bug.
3:52 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Akram Ben Aissi <abenaiss(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1813070
--
You are receiving this mail because:
You are on the CC list for the bug.
9:48 a.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Vikas Laad <vlaad(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1873172
--
You are receiving this mail because:
You are on the CC list for the bug.
1:30 p.m.
New subject: [Bug 1797087] CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification reflection attack
https://bugzilla.redhat.com/show_bug.cgi?id=1797087
Bug 1797087 depends on bug 1797088, which changed state.
Bug 1797088 Summary: CVE-2020-2100 jenkins: UDP multicast/broadcast service amplification
reflection attack [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1797088
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |EOL
--
You are receiving this mail because:
You are on the CC list for the bug.
1310
days inactive
1608
days old
java-sig-commits@lists.fedoraproject.org
10 comments
1 participants
participants (1)
-
bugzilla＠redhat.com