bind9/lib
Ondřej Surý 6212830535 Fix read UAF in BIND9 dns_client_resolve() via DNAME Response
An attacker controlling a malicious DNS server returns a DNAME record,
and the we stores a pointer to resp->foundname, frees the response
structure, then uses the dangling pointer in dns_name_fullcompare()
possibly causing invalid match.  Only the `delv`is affected.  This has
been fixed.

(cherry picked from commit 9135b71a7a)
2026-02-20 19:18:30 +01:00
..
dns Fix read UAF in BIND9 dns_client_resolve() via DNAME Response 2026-02-20 19:18:30 +01:00
isc Rename isc_net_getudpportrange() to isc_net_getportrange() 2026-02-20 17:02:45 +01:00
isccc Remove redundant parentheses from the return statement 2024-11-19 14:26:52 +01:00
isccfg standardize CHECK and RETERR macros 2025-12-03 19:17:20 -08:00
ns Return FORMERR for ECS family 0 2026-02-19 22:42:26 +11:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am Move irs_resconf into libdns and remove libirs 2023-02-24 09:38:59 +00:00