Bug 1118583 (CVE-2014-3554)

Summary: CVE-2014-3554 libndp: buffer overflow flaw in DNS Search List (DNSSL) handling
Product: [Other] Security Response Reporter: Murray McAllister <mmcallis>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED WONTFIX QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: agwa, falonso, jpirko, jrusnack, security-response-team
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-01-20 16:53:45 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1124396    
Bug Blocks: 1118584    
Attachments:
Description Flags
patch from original reporter none

Description Murray McAllister 2014-07-11 05:40:20 UTC 
libndp provides a library for the IPv6 Neighbor Discovery Protocol. A buffer overflow flaw was found in the ndp_msg_opt_dnssl_domain() function when handling the DNS Search List (DNSSL) in IPv6 router advertisements. A malicious router or man-in-the-middle attacker could use this flaw to cause an application using libndp to crash or, potentially, execute arbitrary code.
Comment 1 Murray McAllister 2014-07-11 05:42:36 UTC 
Created attachment 917255 [details]
patch from original reporter
Comment 2 Murray McAllister 2014-07-14 04:27:02 UTC 
Acknowledgements:

Red Hat would like to thank Andrew Ayer for reporting this issue.
Comment 5 Murray McAllister 2014-07-29 12:10:00 UTC 
This issue is public now:

http://www.openwall.com/lists/oss-security/2014/07/29/2
Comment 6 Murray McAllister 2014-07-29 12:11:21 UTC 
Created libndp tracking bugs for this issue:

Affects: fedora-all [bug 1124396]
Comment 8 Vincent Danen 2015-01-20 16:53:25 UTC 
Statement:

Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.