CVE-2014-3484 Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact v...
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/musl(Debian:12) | < 1.1.4-1 | 1.1.4-1 |
| debian/musl(Debian:13) | < 1.1.4-1 | 1.1.4-1 |
| debian/musl(Debian:14) | < 1.1.4-1 | 1.1.4-1 |
| musl-libc musl | >= 0.9.13, <= 1.0.3 | No fix listed |
| musl-libc musl | >= 1.1.0, < 1.1.2 | 1.1.2 |
References
- Debian Security Tracker CVE-2014-3484 vendor-advisory
- git.musl-libc.org patch
- seclists.org mailing-list patch third-party-advisory
- bugs.debian.org issue-tracking