Re: [PATCH] dnsproxy: Address CVE-2025-32366 vulnerability

Hello:

This patch was applied to connman.git (master)
by Denis Kenzior <[email protected]>:

On Mon, 12 May 2025 10:48:18 +0200 you wrote:
> From: 신윤제(학부생-소프트웨어전공) <[email protected]>
> 
> In Connman parse_rr in dnsproxy.c has a memcpy length
> that depends on an RR RDLENGTH value (i.e., *rdlen=ntohs(rr->rdlen)
> and memcpy(response+offset,*end,*rdlen)). Here, rdlen may be larger
> than the amount of remaining packet data in the current state of
> parsing. As a result, values of stack memory locations may be sent
> over the network in a response.
> 
> [...]

Here is the summary with links:
  - dnsproxy: Address CVE-2025-32366 vulnerability
    https://git.kernel.org/pub/scm/network/connman/connman.git/?id=8d3be0285f1d

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html