projects / platform / upstream / dnsmasq.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 920117f) | patch
Security fix, CVE-2017-14496, Integer underflow in DNS response creation. 17/170417/1 accepted/tizen/unified/20180222.142138 submit/tizen/20180222.013450
authorSeonah Moon <seonah1.moon@samsung.com>
Mon, 16 Oct 2017 07:48:06 +0000 (16:48 +0900)
committerSeonah Moon <seonah1.moon@samsung.com>
Tue, 20 Feb 2018 02:16:31 +0000 (11:16 +0900)
commit7407256e98e9edb6a87e5f7dadd38fa90a022d2b
tree69abc3aa7476f43d77fdc40b3e181db2f732833ftree | snapshot
parent920117f1229f955001e7a1f371af81e38da830facommit | diff
Security fix, CVE-2017-14496, Integer underflow in DNS response creation.

Fix DoS in DNS. Invalid boundary checks in the
add_pseudoheader function allows a memcpy call with negative
size An attacker which can send malicious DNS queries
to dnsmasq can trigger a DoS remotely.
dnsmasq is vulnerable only if one of the following option is
specified: --add-mac, --add-cpe-id or --add-subnet.

http://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=897c113fda0886a28a986cc6ba17bb93bd6cb1c7

Change-Id: I4171560a179639755a115abfc381f03aa54f3bab
Signed-off-by: Seonah Moon <seonah1.moon@samsung.com>
src/rfc1035.c diff | blob | history
Domain: Network & Connectivity / Data Network;