mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-15 01:10:05 -04:00
parent
3f4d9f739c
commit
034a63c1f3
1 changed files with 8 additions and 4 deletions
|
|
@ -38,15 +38,19 @@ Feature Changes
|
|||
Bug Fixes
|
||||
~~~~~~~~~
|
||||
|
||||
- None.
|
||||
|
||||
- The value of If-Modified-Since header in statistics channel was not checked
|
||||
for length leading to possible buffer overflow by an authorized user. We
|
||||
would like to emphasize that statistics channel must be properly setup to
|
||||
allow access only from authorized users of the system. :gl:`#4124`
|
||||
|
||||
This was reported independently by Eric Sesterhenn of X41 D-SEC and Cameron
|
||||
Whitehead.
|
||||
This issue was reported independently by Eric Sesterhenn of X41 D-SEC and
|
||||
Cameron Whitehead.
|
||||
|
||||
- The value of Content-Length header in statistics channel was not bound checked
|
||||
and negative or large enough value could lead to overflow and assertion failure.
|
||||
:gl:`#4125`
|
||||
|
||||
This issue was reported by Eric Sesterhenn of X41 D-SEC.
|
||||
|
||||
Known Issues
|
||||
~~~~~~~~~~~~
|
||||
|
|
|
|||
Loading…
Reference in a new issue