In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option, rtsold(8) decodes domain name labels per an encoding specified in RFC 1035 in which the first octet of each label contains the label's length. rtsold(8) did not validate label lengths correctly and could overflow the destination buffer.
References
Link | Resource |
---|---|
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:32.rtsold.asc | Vendor Advisory |
https://security.netapp.com/advisory/ntap-20210423-0004/ | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: freebsd
Published: 2021-03-29T19:53:57
Updated: 2021-04-23T05:06:27
Reserved: 2020-09-14T00:00:00
Link: CVE-2020-25583
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-03-29T20:15:12.953
Modified: 2021-06-03T19:11:41.417
Link: CVE-2020-25583
JSON object: View
Redhat Information
No data.
CWE