Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP3:GA
libunbound-devel-mini.22509
bsc1185388_CVE-2019-25037_d2eb78e8.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File bsc1185388_CVE-2019-25037_d2eb78e8.patch of Package libunbound-devel-mini.22509
From d2eb78e871153f22332d30c6647f3815148f21e5 Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl> Date: Tue, 3 Dec 2019 15:20:48 +0100 Subject: [PATCH] - Fix Assert Causing DoS in dname_pkt_copy(), reported by X41 D-Sec. --- util/data/dname.c | 4 ++++ 1 file changed, 4 insertions(+) --- util/data/dname.c +++ util/data/dname.c 2022-01-17 12:53:03.504445842 +0000 @@ -358,6 +358,10 @@ void dname_pkt_copy(sldns_buffer* pkt, u lablen = *dname++; continue; } + if(lablen > LDNS_MAX_LABELLEN) { + *to = 0; /* end the result prematurely */ + return; + } log_assert(lablen <= LDNS_MAX_LABELLEN); len += (size_t)lablen+1; if(len >= LDNS_MAX_DOMAINLEN) {
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
