DoS httpd
JP <[email protected]> Fri, 16 Nov 2018 05:16:52 -0500
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <CAHN8BqoFM7d=MJLgu1EVGNrEC47m4rnyWfQfw8y5saQPQSi_LQ@mail.gmail.com> |
The default httpd can suffer a DoS in which a malicious user can hang the system temporarily. I'm working on a patch, but in a nutshell it's the strdup()s. J