[PATCH][BZ #16072] Fix stack overflow due to large AF_INET6 requests

Frank Ch. Eigler fche@redhat.com
Thu Oct 24 21:51:00 GMT 2013


Siddhesh Poyarekar <siddhesh@redhat.com> writes:

> [...]
> This size is controlled by the size of the DNS response or the
> response generated from /etc/hosts.  Unless an attacker has control of
> the DNS server (or access to modify /etc/hosts) [...]

But the CVE's were issued precisely because sometimes attackers have
control of a DNS zone.  But the DoS worry (that the act of attempting
to allocate excessive memory harms the system) seems quite remote in
this case.

- FChE



More information about the Libc-alpha mailing list