WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-10 20:07:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

- CVE-2020-12662 Unbound can be tricked into amplifying an incoming

Browse Source 
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
  used to make Unbound unresponsive.
This commit is contained in:
W.C.A. Wijngaards
2020-05-19 10:27:27 +02:00
parent 4ccac696ca
commit ba0f382eee
10 changed files with 252 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files
util/data/msgparse.c
+5 -1
View File
@@ -55,7 +55,11 @@ smart_compare(sldns_buffer* pkt, uint8_t* dnow,
{
if(LABEL_IS_PTR(*dnow)) {
/* ptr points to a previous dname */
uint8_t* p = sldns_buffer_at(pkt, PTR_OFFSET(dnow[0], dnow[1]));
uint8_t* p;
if((size_t)PTR_OFFSET(dnow[0], dnow[1])
>= sldns_buffer_limit(pkt))
return -1;
p = sldns_buffer_at(pkt, PTR_OFFSET(dnow[0], dnow[1]));
if( p == dprfirst || p == dprlast )
return 0;
/* prev dname is also a ptr, both ptrs are the same. */