MGASA-2014-0262

Source
https://advisories.mageia.org/MGASA-2014-0262.html
Import Source
https://advisories.mageia.org/MGASA-2014-0262.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2014-0262
Related
Published
2014-06-18T17:55:16Z
Modified
2014-06-18T17:55:11Z
Summary
Updated musl package fixes CVE-2014-3484
Details

Updated musl package fixes security vulnerability:

A remote stack-based buffer overflow has been found in musl libc's dns response parsing code. The overflow can be triggered in programs linked against musl libc and making dns queries via one of the standard interfaces (getaddrinfo, getnameinfo, gethostbyname, gethostbyaddr, etc.) if one of the configured nameservers in resolv.conf is controlled by an attacker, or if an attacker can inject forged udp packets with control over their contents. Denial of service is also possible via a related failure in loop detection (CVE-2014-3484).

References
Credits

Affected packages

Mageia:4 / musl

Package

Name
musl
Purl
pkg:rpm/mageia/musl?distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.9.14-2.1.mga4

Ecosystem specific

{
    "section": "core"
}