1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
samba-mirror/source4/dns_server
Stefan Metzmacher 34f4491d79 CVE-2018-14629 dns: fix CNAME loop prevention using counter regression
The loop prevention should only be done for CNAME records!

Otherwise we truncate the answer records for A, AAAA or
SRV queries, which is a bad idea if you have more than 20 DCs.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13600

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Dec  4 08:52:29 CET 2018 on sn-devel-144
2018-12-04 08:52:29 +01:00
..
dlz_bind9.c s4:bind_dlz: Only copy the dn once 2018-11-22 22:13:26 +01:00
dlz_minimal.h dlz-bind: Add support for BIND 9.12.x 2018-08-10 02:44:36 +02:00
dns_crypto.c dns: Simplify logic a bit 2018-06-01 11:28:22 +02:00
dns_query.c CVE-2018-14629 dns: fix CNAME loop prevention using counter regression 2018-12-04 08:52:29 +01:00
dns_server.c source4 smdb: Add a post fork hook to the service API 2018-11-01 23:49:24 +01:00
dns_server.h dns: moving name_equal func into common 2018-07-12 04:31:54 +02:00
dns_update.c dns: static records 2018-07-12 04:31:56 +02:00
dns_utils.c dns_server: Remove unused "dns_generate_options" 2018-01-04 00:37:21 +01:00
dnsserver_common.c CVE-2018-16852 dcerpc dnsserver: refactor common properties handling 2018-11-28 08:22:24 +01:00
dnsserver_common.h CVE-2018-16852 dcerpc dnsserver: refactor common properties handling 2018-11-28 08:22:24 +01:00
pydns.c python: Port dsdb_dns module to Python 3 compatible form. 2018-02-15 00:18:28 +01:00
TODO
wscript_build dlz-bind: Add support for BIND 9.12.x 2018-08-10 02:44:36 +02:00