NLnetLabs/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code

Browse Source 
Execution when digesting DNSKEY. Thanks to Yuqi Qiu and Xiang Li
  from Nankai University, AOSP Lab for the report.
This commit is contained in:
W.C.A. Wijngaards
2026-09-16 09:18:49 +02:00
parent e619ead2db
commit 8c2e0fd6cc
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
validator/val_sigcrypt.c
+2
View File
@@ -305,6 +305,8 @@ ds_create_dnskey_digest(struct module_env* env,
* digest = digest_algorithm( DNSKEY owner name | DNSKEY RDATA);
* DNSKEY RDATA = Flags | Protocol | Algorithm | Public Key. */
sldns_buffer_clear(b);
if(!sldns_buffer_available(b, dnskey_rrset->rk.dname_len + dnskey_len-2))
return 0; /* buffer too small */
sldns_buffer_write(b, dnskey_rrset->rk.dname,
dnskey_rrset->rk.dname_len);
query_dname_tolower(sldns_buffer_begin(b));