[Bug network/13013] assertion error in res_query.c

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=13013

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fweimer at redhat dot com
              Flags|                            |security+

--- Comment #10 from Florian Weimer <fweimer at redhat dot com> ---
I think this can be triggered by (untrusted) authoritative servers with some
resolvers, so it this is a denial-of-service vulnerability.

Commit 4769ae77fc6c8dacea6476addb015c8797848cdd (see comment #1) went into
glibc 2.14, so versions from 2.14 to 2.16 are affected by this.

-- 
You are receiving this mail because:
You are on the CC list for the bug.