[Secure-testing-team] Bug#748827: torque: CVE-2014-0749

[Salvatore Bonaccorso]

Source: torque
Version: 2.4.8+dfsg-9
Severity: grave
Tags: security upstream

Hi,

the following vulnerability was published for torque.

CVE-2014-0749[0]:
| Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale
| Open-Source Resource and Queue Manager (aka TORQUE Resource Manager)
| 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code
| via a large count value.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0749
    https://security-tracker.debian.org/tracker/CVE-2014-0749

The vulnerability also applies to the 2.4 branch but was not checked as
it is already long end-of-lifed upstream.

Regards,
Salvatore