[Bug 1664320] [NEW] xbrlapi loopback interface abuse

Raúl Vidal raulvior.bcn at gmail.com
Mon Feb 13 18:28:08 UTC 2017


Public bug reported:

Xbrlapi creates new TCP connections in port 4101 at loopback interface. These are closed instantly because there is no service listening at 4101 on the lo interface.
Xbrlapi should not do that if there is no braille device.

This might pose a security risk, but I have not verified it.

ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: xbrlapi 5.4-0ubuntu4
ProcVersionSignature: Ubuntu 4.8.0-37.39-generic 4.8.16
Uname: Linux 4.8.0-37-generic x86_64
ApportVersion: 2.20.3-0ubuntu8.2
Architecture: amd64
CurrentDesktop: Unity
Date: Mon Feb 13 19:25:58 2017
InstallationDate: Installed on 2015-07-31 (562 days ago)
InstallationMedia: Ubuntu 14.04.2 LTS "Trusty Tahr" - Release amd64 (20150218.1)
SourcePackage: brltty
UpgradeStatus: Upgraded to yakkety on 2016-11-01 (103 days ago)

** Affects: brltty (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug yakkety

-- 
You received this bug notification because you are a member of
Accessibility, which is subscribed to brltty in Ubuntu.
https://bugs.launchpad.net/bugs/1664320

Title:
  xbrlapi loopback interface abuse

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/brltty/+bug/1664320/+subscriptions



More information about the Ubuntu-accessibility-bugs mailing list