upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-20 23:00:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Fix Out-of-Bounds Read in dname_valid(),

Browse source 
reported by X41 D-Sec.
This commit is contained in:
W.C.A. Wijngaards 2019-11-20 11:38:11 +01:00
parent 7646c96259
commit 72d348de6a
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/Changelog
View file

@ -10,6 +10,8 @@
reported by X41 D-Sec. reported by X41 D-Sec.
- Fix Randomness Error not Handled Properly, - Fix Randomness Error not Handled Properly,
reported by X41 D-Sec. reported by X41 D-Sec.
- Fix Out-of-Bounds Read in dname_valid(),
reported by X41 D-Sec.
19 November 2019: Wouter 19 November 2019: Wouter
- Fix CVE-2019-18934, shell execution in ipsecmod. - Fix CVE-2019-18934, shell execution in ipsecmod.

2
util/data/dname.c
View file

@ -75,6 +75,8 @@ dname_valid(uint8_t* dname, size_t maxlen)
{ {
size_t len = 0; size_t len = 0;
size_t labellen; size_t labellen;
if(maxlen == 0)
return 0; /* too short, shortest is '0' root label */
labellen = *dname++; labellen = *dname++;
while(labellen) { while(labellen) {
if(labellen&0xc0) if(labellen&0xc0)