This is the mail archive of the glibc-bugs@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug network/19830] nss_dns: should check RDATA length against buffer length


https://sourceware.org/bugzilla/show_bug.cgi?id=19830

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED
   Target Milestone|---                         |2.24
              Flags|security?                   |security-

--- Comment #2 from Florian Weimer <fweimer at redhat dot com> ---
Fixed in 2.24.

Marked security- because it is a very, very restricted information disclosure
and regular recursive resolvers will not forward/produce such broken DNS
responses.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]