1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-06 13:18:07 +03:00
samba-mirror/source4/dsdb
Gary Lockyer 55fb0c2f67 CVE-2019-19344 kcc dns scavenging: Fix use after free in dns_tombstone_records_zone
ldb_msg_add_empty reallocates the underlying element array, leaving
old_el pointing to freed memory.

This patch takes two defensive copies of the ldb message, and performs
the updates on them rather than the ldb messages in the result.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=14050

Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
2020-01-10 11:56:20 +01:00
..
common CVE-2019-14833 dsdb: send full password to check password script 2019-10-24 12:34:28 +02:00
dns dsdb: Fix a typo 2018-06-16 01:06:37 +02:00
kcc CVE-2019-19344 kcc dns scavenging: Fix use after free in dns_tombstone_records_zone 2020-01-10 11:56:20 +01:00
repl dsdb/repl: we need to replicate the whole schema before we can apply it 2019-06-21 07:56:16 +00:00
samdb CVE-2019-14902 dsdb: Change basis of descriptor module deferred processing to be GUIDs 2020-01-10 11:56:20 +01:00
schema dsdb: Fix CID 1034744 Dereference after null check 2018-04-04 00:44:22 +02:00
tests/python CVE-2019-14847 dsdb: Demonstrate the correct interaction of ranged_results style attributes and dirsync 2019-10-24 12:34:28 +02:00
pydsdb.c s4:dsdb: add DSDB_CONTROL_DBCHECK_FIX_LINK_DN_SID oid 2018-11-05 12:44:31 +01:00
samdb.pc.in s4-pkgconfig: add @LIB_RPATH@ to our link flags 2010-12-08 12:46:00 +01:00
wscript_build s4-dsdb: only build dsdb Python modules for AD DC 2018-07-31 12:36:24 +02:00