[dns-operations] CVE-2015-7547: glibc getaddrinfo buffer overflow

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed Feb 17 08:58:09 UTC 2016


On Tue, Feb 16, 2016 at 03:49:18PM +0000,
 Tony Finch <dot at dotat.at> wrote 
 a message of 41 lines which said:

> Technical analysis and patch:
> 
>  https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html

And a lot of stupid advice (limiting answers to 512 bytes in the
firewall), disabling IPv6 and/or DNSSEC in applications, etc.



More information about the dns-operations mailing list