Stack-Based Buffer Overflow in musl libc Affects Network Applications

CVE-2014-3484

What is CVE-2014-3484?

This vulnerability involves multiple stack-based buffer overflows in the __dn_expand function of musl libc, affecting versions prior to 1.1.2 and specific versions within 0.9.13 to 1.0.3. The flaw allows remote attackers to exploit invalid name lengths in DNS responses, potentially leading to unexpected behavior and service interruptions. In certain scenarios, this vulnerability could cause an infinite loop, resulting in denial of service through application crashes. Addressing this issue is crucial for maintaining the security of network-related applications utilizing the musl libc.

References