1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-08 21:18:16 +03:00
samba-mirror/python
Kai Blin 392ec4d241 bug #10609: CVE-2014-0239 Don't reply to replies
Due to insufficient input checking, the DNS server will reply to a packet that
has the "reply" bit set. Over UDP, this allows to send a packet with a spoofed
sender address and have two servers DOS each other with circular replies.

This patch fixes bug #10609 and adds a test to make sure we don't regress.
CVE-2014-2039 has been assigned to this issue.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10609

Signed-off-by: Kai Blin <kai@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Kai Blin <kai@samba.org>
Autobuild-Date(master): Tue May 20 04:15:44 CEST 2014 on sn-devel-104
2014-05-20 04:15:44 +02:00
..
examples Move python modules from source4/scripting/python/ to python/. 2013-03-02 03:57:34 +01:00
samba bug #10609: CVE-2014-0239 Don't reply to replies 2014-05-20 04:15:44 +02:00
samba_external Move python modules from source4/scripting/python/ to python/. 2013-03-02 03:57:34 +01:00
modules.c Move python modules from source4/scripting/python/ to python/. 2013-03-02 03:57:34 +01:00
modules.h Move python modules from source4/scripting/python/ to python/. 2013-03-02 03:57:34 +01:00
pyglue.c samba:python - Py_RETURN_NONE remove compatibility code for releases < 2.4 2014-01-09 16:27:47 +01:00
uuidmodule.c Move python modules from source4/scripting/python/ to python/. 2013-03-02 03:57:34 +01:00
wscript_build Move python modules from source4/scripting/python/ to python/. 2013-03-02 03:57:34 +01:00