dirmngr: heap out-of-bounds read in CERT record parsing
Testing, HighPublic
Actions

Assigned To

Authored By

	• gniibe
	Tue, Sep 22, 6:46 AM

Description

When DNS standard resolver is in use by dirmngr, there may be out-of-bounds read in CERT parsing.

rG GnuPG
	rG6f5a9cfe603b dirmngr: Add another validation in get_dns_cert_standard.
	rG43a74a96ad25 dirmngr: Add another validation in get_dns_cert_standard.

• gniibe triaged this task as High priority.

• gniibe created this task.

• gniibe changed the task status from Open to Testing.Tue, Sep 22, 8:29 AM

• werner moved this task from Backlog to WIP on the gnupg26 board.

• werner shifted this object from the Restricted Space space to the S1 Public space.Tue, Sep 22, 12:03 PM

• werner changed the visibility from "g10code (Project)" to "Public (No Login Required)".

• werner changed the edit policy from "Custom Policy" to "Contributor (Project)".

• gniibe mentioned this in Unknown Object (Maniphest Task).Mon, Sep 28, 2:25 AM