glibc/resolv/nss_dns
Florian Weimer b752934602 CVE-2023-4527: Stack read overflow with large TCP responses in no-aaaa mode
Without passing alt_dns_packet_buffer, __res_context_search can only
store 2048 bytes (what fits into dns_packet_buffer).  However,
the function returns the total packet size, and the subsequent
DNS parsing code in _nss_dns_gethostbyname4_r reads beyond the end
of the stack-allocated buffer.

Fixes commit f282cdbe7f ("resolv: Implement no-aaaa
stub resolver option") and bug 30842.

(cherry picked from commit bd77dd7e73)
2023-09-13 14:15:22 +02:00
..
dns-canon.c Update copyright dates with scripts/update-copyrights 2023-01-06 21:14:39 +00:00
dns-host.c CVE-2023-4527: Stack read overflow with large TCP responses in no-aaaa mode 2023-09-13 14:15:22 +02:00
dns-network.c Update copyright dates with scripts/update-copyrights 2023-01-06 21:14:39 +00:00