mirror of
https://github.com/nodejs/node.git
synced 2024-11-21 10:59:27 +00:00
a81aa37944
Original commit message: If there are more ttls returned than the maximum provided by the requestor, then the *naddrttls response would be larger than the actual number of elements in the addrttls array. This bug could lead to invalid memory accesses in applications using c-ares. This behavior appeared to break with PR https://github.com/c-ares/c-ares/pull/257 Fixes: https://github.com/c-ares/c-ares/issues/371 Reported By: Momtchil Momtchev (@mmomtchev) Fix By: Brad House (@bradh352) Refs: https://github.com/nodejs/node/issues/36063 Signed-off-by: Michael Dawson <mdawson@devrus.com> CVE-ID: CVE-2020-8277 PR-URL: https://github.com/nodejs-private/node-private/pull/231 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Rich Trott <rtrott@gmail.com> Reviewed-By: Beth Griggs <bgriggs@redhat.com> |
||
|---|---|---|
| .. | ||
| acorn | ||
| acorn-plugins | ||
| brotli | ||
| cares | ||
| cjs-module-lexer | ||
| histogram | ||
| icu-small | ||
| llhttp | ||
| nghttp2 | ||
| nghttp3 | ||
| ngtcp2 | ||
| node-inspect | ||
| npm | ||
| openssl | ||
| uv | ||
| uvwasi | ||
| v8 | ||
| zlib | ||