[Bug network/30843] potential use-after-free in getcanonname (CVE-2023-4806)

[xry111 at xry111 dot site]

https://sourceware.org/bugzilla/show_bug.cgi?id=30843

Xi Ruoyao <xry111 at xry111 dot site> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |xry111 at xry111 dot site

--- Comment #2 from Xi Ruoyao <xry111 at xry111 dot site> ---
(In reply to Siddhesh Poyarekar from comment #0)

> This issue is only exploitable when a NSS module implements only the
> _nss_*_gethostbyname2_r hook without implementing the
> _nss_*_gethostbyname3_r hook. There are no known modules that are
> implemented in this way.

nss_wins from samba implements _nss_wins_gethostbyname_r and
_nss_wins_gethostbyname2_r, but not _nss_wins_gethostbyname3_r.  Is it
problematic?

-- 
You are receiving this mail because:
You are on the CC list for the bug.