[PATCH][BZ #16072] Fix stack overflow due to large AF_INET6 requests
Frank Ch. Eigler
fche@redhat.com
Thu Oct 24 21:51:00 GMT 2013
Siddhesh Poyarekar <siddhesh@redhat.com> writes:
> [...]
> This size is controlled by the size of the DNS response or the
> response generated from /etc/hosts. Unless an attacker has control of
> the DNS server (or access to modify /etc/hosts) [...]
But the CVE's were issued precisely because sometimes attackers have
control of a DNS zone. But the DoS worry (that the act of attempting
to allocate excessive memory harms the system) seems quite remote in
this case.
- FChE
More information about the Libc-alpha
mailing list