mirror of
git://sourceware.org/git/glibc.git
synced 2026-09-08 23:58:31 +08:00
advisories: Update GLIBC-SA-2026-0012 metadata
Update vulnerable versions in descriptive text.
This commit is contained in:
@@ -1,11 +1,11 @@
|
||||
Buffer overread in ns_printrrf with corrupted RDATA field
|
||||
|
||||
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the
|
||||
GNU C Library version 2.2 and newer fail to validate the RDATA content
|
||||
against the RDATA length in a DNS response when processing A6, CERT, LOC,
|
||||
TKEY or TSIG records, which may allow an attacker to craft a DNS
|
||||
response, causing a target application to crash or read uninitialized
|
||||
memory.
|
||||
GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA
|
||||
content against the RDATA length in a DNS response when processing A6,
|
||||
CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a
|
||||
DNS response, causing a target application to crash or read
|
||||
uninitialized memory.
|
||||
|
||||
These functions are for application debugging only and hence not in the
|
||||
path of code executed by the DNS resolver. Further, they have been
|
||||
|
||||
Reference in New Issue
Block a user