[Bug nis/34528] New: Stack overflow (stack exhaustion) in yp_all

https://sourceware.org/bugzilla/show_bug.cgi?id=34528

            Bug ID: 34528
           Summary: Stack overflow (stack exhaustion) in yp_all
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P3
         Component: nis
          Assignee: unassigned at sourceware dot org
          Reporter: fweimer at redhat dot com
                CC: kukuk at suse dot de
  Target Milestone: ---
             Flags: security+

Created attachment 16941
  --> https://sourceware.org/bugzilla/attachment.cgi?id=16941&action=edit
RHEL-215313.html

There are large stack allocations (bounded by XDRMAXRECORD bytes) in
__xdr_ypresp_all, which is the XDR decoding routine in yp_all. This can lead to
process crashes or memory
corruption. Building with -fstack-clash-protection reliably turns this into
crashes due
to the XDRMAXRECORD bound.

I'm required to mention: Found by AISLE in partnership with Red Hat

The impact rating in the report is too high. This is a client-initiated
denial-of-service issue in legacy/compat code, so hardly relevent. Still it's
technically a security vulnerability.

-- 
You are receiving this mail because:
You are on the CC list for the bug.