From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <sourceware-bugzilla@sourceware.org>
Received: by sourceware.org (Postfix, from userid 48)
	id CDC1D3858CDA; Thu, 14 Sep 2023 06:45:19 +0000 (GMT)
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org CDC1D3858CDA
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org;
	s=default; t=1694673919;
	bh=e698kS37rENSJKE3QWPSkLRQrjZKQFNj8A8zod2EaUQ=;
	h=From:To:Subject:Date:In-Reply-To:References:From;
	b=amcobqQgaY86BOh7Xm6zFqhe7ymnnptCaKsLs9VLwdnX4BvuXSxz9KhXB1oYNIAPp
	 2pbVpwNq0UMhs7QzgOGugw+hnBGB6QLd53R51VcbYaIMxfencetxANC3XXIJNO1fb2
	 DIbNE1B4YRU2Or/gvwiWQvWM/LJdDu1zbs6gxxmY=
From: "xry111 at xry111 dot site" <sourceware-bugzilla@sourceware.org>
To: glibc-bugs@sourceware.org
Subject: [Bug network/30843] potential use-after-free in getcanonname
 (CVE-2023-4806)
Date: Thu, 14 Sep 2023 06:45:19 +0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: glibc
X-Bugzilla-Component: network
X-Bugzilla-Version: unspecified
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: normal
X-Bugzilla-Who: xry111 at xry111 dot site
X-Bugzilla-Status: ASSIGNED
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: P2
X-Bugzilla-Assigned-To: siddhesh at sourceware dot org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: security+
X-Bugzilla-Changed-Fields: cc
Message-ID: <bug-30843-131-lAbLNvhrT5@http.sourceware.org/bugzilla/>
In-Reply-To: <bug-30843-131@http.sourceware.org/bugzilla/>
References: <bug-30843-131@http.sourceware.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://sourceware.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
List-Id: <glibc-bugs.sourceware.org>

https://sourceware.org/bugzilla/show_bug.cgi?id=3D30843

Xi Ruoyao <xry111 at xry111 dot site> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |xry111 at xry111 dot site

--- Comment #2 from Xi Ruoyao <xry111 at xry111 dot site> ---
(In reply to Siddhesh Poyarekar from comment #0)

> This issue is only exploitable when a NSS module implements only the
> _nss_*_gethostbyname2_r hook without implementing the
> _nss_*_gethostbyname3_r hook. There are no known modules that are
> implemented in this way.

nss_wins from samba implements _nss_wins_gethostbyname_r and
_nss_wins_gethostbyname2_r, but not _nss_wins_gethostbyname3_r.  Is it
problematic?

--=20
You are receiving this mail because:
You are on the CC list for the bug.=