Possible DOS due to OSD notification spending long time with 100% CPU utilization when receiving long messages

Bug #504202 reported by Johannes Rudolph
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
pidgin-libnotify (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Binary package hint: pidgin

Getting real long messages leads to 100 % CPU utilization in notify-osd (or similar) and pidgin freezes. This could possibly used as a DOS attack against pidgin.

The problem might be with notify-osd but pidgin should probably trim messages to a reasonable length before passing them to notify-osd.

security vulnerability: yes → no
visibility: private → public
affects: pidgin (Ubuntu) → pidgin-libnotify (Ubuntu)
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in pidgin-libnotify (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.