diff options
| author | Cy Schubert <cy@FreeBSD.org> | 2024-02-15 15:41:07 +0000 |
|---|---|---|
| committer | Cy Schubert <cy@FreeBSD.org> | 2024-02-15 21:27:55 +0000 |
| commit | fc773115fa2dbb6c01377f2ed47dabf79a4e361a (patch) | |
| tree | fccf3eec03dfd4395fa9200f42f1976ac0b30990 /sbin/reboot | |
| parent | 60616b445eb5b01597092fef5b14549f95000130 (diff) | |
| download | src-fc773115fa2dbb6c01377f2ed47dabf79a4e361a.tar.gz src-fc773115fa2dbb6c01377f2ed47dabf79a4e361a.zip | |
heimdal: Fix NULL deref
A flawed logical condition allows a malicious actor to remotely
trigger a NULL pointer dereference using a crafted negTokenInit
token.
Upstream notes:
Reported to Heimdal by Michał Kępień <michal@isc.org>.
From the report:
Acknowledgement
---------------
This flaw was found while working on addressing ZDI-CAN-12302: ISC BIND
TKEY Query Heap-based Buffer Overflow Remote Code Execution
Vulnerability, which was reported to ISC by Trend Micro's Zero Day
Security: CVE-2022-3116
Obtained from: upstream 7a19658c1
MFC after: 1 week
Diffstat (limited to 'sbin/reboot')
0 files changed, 0 insertions, 0 deletions