Buffer Overrun Vulnerability in Adns Affects Various Applications

CVE-2017-9106

What is CVE-2017-9106?

A buffer overrun issue has been discovered in versions of Adns prior to 1.5.2. This vulnerability occurs when the function adns_rr_info mishandles invalid inputs during integer formatting operations. If an integer value exceeds its permitted range, there is a risk of buffer overflow due to the failure to enforce strict boundaries for integer inputs. Specifically, the problem is associated with sign extending SOA 32-bit integer fields and the incorrect use of signed data types. It is crucial for developers to implement rigorous data validation checks to guard against such misconfigurations, thus preventing potential exploits related to data overruns.

References