public inbox for glibc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug network/15330] New: Stack overflow in getaddrinfo with many results
@ 2013-04-03 12:37 schwab@linux-m68k.org
  2013-04-03 15:34 ` [Bug network/15330] " schwab@linux-m68k.org
                   ` (3 more replies)
  0 siblings, 4 replies; 5+ messages in thread
From: schwab@linux-m68k.org @ 2013-04-03 12:37 UTC (permalink / raw)
  To: glibc-bugs

http://sourceware.org/bugzilla/show_bug.cgi?id=15330

             Bug #: 15330
           Summary: Stack overflow in getaddrinfo with many results
           Product: glibc
           Version: 2.16
            Status: NEW
          Severity: normal
          Priority: P2
         Component: network
        AssignedTo: unassigned@sourceware.org
        ReportedBy: schwab@linux-m68k.org
    Classification: Unclassified


If gaih_inet returns many results then the subsequent sort process can overflow
the stack.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug network/15330] Stack overflow in getaddrinfo with many results
  2013-04-03 12:37 [Bug network/15330] New: Stack overflow in getaddrinfo with many results schwab@linux-m68k.org
@ 2013-04-03 15:34 ` schwab@linux-m68k.org
  2013-04-03 16:09 ` schwab@linux-m68k.org
                   ` (2 subsequent siblings)
  3 siblings, 0 replies; 5+ messages in thread
From: schwab@linux-m68k.org @ 2013-04-03 15:34 UTC (permalink / raw)
  To: glibc-bugs

http://sourceware.org/bugzilla/show_bug.cgi?id=15330

--- Comment #1 from Andreas Schwab <schwab@linux-m68k.org> 2013-04-03 15:34:41 UTC ---
CVE-2013-1914

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug network/15330] Stack overflow in getaddrinfo with many results
  2013-04-03 12:37 [Bug network/15330] New: Stack overflow in getaddrinfo with many results schwab@linux-m68k.org
  2013-04-03 15:34 ` [Bug network/15330] " schwab@linux-m68k.org
@ 2013-04-03 16:09 ` schwab@linux-m68k.org
  2014-06-13 10:09 ` fweimer at redhat dot com
  2014-06-13 10:40 ` [Bug network/15330] Stack overflow in getaddrinfo with many results (CVE-2013-1914) fweimer at redhat dot com
  3 siblings, 0 replies; 5+ messages in thread
From: schwab@linux-m68k.org @ 2013-04-03 16:09 UTC (permalink / raw)
  To: glibc-bugs

http://sourceware.org/bugzilla/show_bug.cgi?id=15330

Andreas Schwab <schwab@linux-m68k.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED
   Target Milestone|---                         |2.18

--- Comment #2 from Andreas Schwab <schwab@linux-m68k.org> 2013-04-03 16:08:58 UTC ---
Fixed by 1cef1b19089528db11f221e938f60b9b048945d7

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug network/15330] Stack overflow in getaddrinfo with many results
  2013-04-03 12:37 [Bug network/15330] New: Stack overflow in getaddrinfo with many results schwab@linux-m68k.org
  2013-04-03 15:34 ` [Bug network/15330] " schwab@linux-m68k.org
  2013-04-03 16:09 ` schwab@linux-m68k.org
@ 2014-06-13 10:09 ` fweimer at redhat dot com
  2014-06-13 10:40 ` [Bug network/15330] Stack overflow in getaddrinfo with many results (CVE-2013-1914) fweimer at redhat dot com
  3 siblings, 0 replies; 5+ messages in thread
From: fweimer at redhat dot com @ 2014-06-13 10:09 UTC (permalink / raw)
  To: glibc-bugs

https://sourceware.org/bugzilla/show_bug.cgi?id=15330

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fweimer at redhat dot com
              Alias|                            |CVE-2013-1914
              Flags|                            |security+

-- 
You are receiving this mail because:
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug network/15330] Stack overflow in getaddrinfo with many results (CVE-2013-1914)
  2013-04-03 12:37 [Bug network/15330] New: Stack overflow in getaddrinfo with many results schwab@linux-m68k.org
                   ` (2 preceding siblings ...)
  2014-06-13 10:09 ` fweimer at redhat dot com
@ 2014-06-13 10:40 ` fweimer at redhat dot com
  3 siblings, 0 replies; 5+ messages in thread
From: fweimer at redhat dot com @ 2014-06-13 10:40 UTC (permalink / raw)
  To: glibc-bugs

https://sourceware.org/bugzilla/show_bug.cgi?id=15330

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Stack overflow in           |Stack overflow in
                   |getaddrinfo with many       |getaddrinfo with many
                   |results                     |results (CVE-2013-1914)

-- 
You are receiving this mail because:
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2014-06-13 10:40 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2013-04-03 12:37 [Bug network/15330] New: Stack overflow in getaddrinfo with many results schwab@linux-m68k.org
2013-04-03 15:34 ` [Bug network/15330] " schwab@linux-m68k.org
2013-04-03 16:09 ` schwab@linux-m68k.org
2014-06-13 10:09 ` fweimer at redhat dot com
2014-06-13 10:40 ` [Bug network/15330] Stack overflow in getaddrinfo with many results (CVE-2013-1914) fweimer at redhat dot com

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).