libmcrypt contains a flaw that may allow a remote denial of service. The issue is triggered when libmcrypt loads algorithms via libtool, which will cause a memory leak. By repeating the requests for libmcrypt, a remote attacker can exhaust the memory on the system. This flaw leads to a loss of availablity.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service,
Misconfiguration
Impact:
Loss of Confidentiality,
Loss of Availability
Exploit:
Exploit Unknown
Solution
Upgrade to version 2.5.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
prohost.org -
