Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 6 Jun 2014 18:57:13 -0400
From: Rich Felker <>
Subject: Security advisory for musl libc - remote stack-based buffer overflow
 in DNS response parsing [CVE-2014-3484]

A remote stack-based buffer overflow has been found in musl libc's dns
response parsing code.

The overflow can be triggered in programs linked against musl libc and
making dns queries via one of the standard interfaces (getaddrinfo,
getnameinfo, gethostbyname, gethostbyaddr, etc.) if one of the
configured nameservers in resolv.conf is controlled by an attacker, or
if an attacker can inject forged udp packets with control over their
contents. Denial of service is also possible via a related failure in
loop detection.

The difficulty of such an attack is likely moderate to high and is
most feasible if the attacker has already compromised network
infrastructure components (nameservers, routers, etc.). Using a local
caching nameserver may mitigate the issue but patching is preferred.

Software: musl libc (

Affected Versions: 0.9.13 - 1.0.2, 1.1.0, and 1.1.1.

Fixed Versions: 1.0.3 and 1.1.2

Bug introduced in commit:

Bug fixed in commit:

Patch for all affected versions:
musl_dn_expand_overflow_fix_v2.diff (attached)

View attachment "musl_dn_expand_overflow_fix_v2.diff" of type "text/plain" (1841 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.