Candidate: CVE-2007-3380 References: https://www.redhat.com/archives/cluster-devel/2007-June/msg00213.html Description: Ubuntu-Description: A flaw was discovered in the cluster manager. A remote attacker could connect to the DLM port and block further DLM operations. Notes: dannf> Debian's 2.6.18 isn't affected, but the redhat-cluster package may be. jmm> redhat-cluster doesn't appear affected neither, TCP connection code not present. Fixed in git on 2007-07-09, marking 2.6.23 as fixed Bugs: upstream: released (2.6.23) linux-2.6: released (2.6.23-1) 2.6.18-etch-security: N/A 2.6.8-sarge-security: N/A 2.4.27-sarge-security: N/A 2.6.15-dapper-security: released (2.6.15-28.57) 2.6.17-edgy-security: N/A 2.6.20-feisty-security: N/A