Description
Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service (infinite loop) via a DNS response containing a label pointer that references its own offset.
References
- 24181 third-party-advisory
- http://monkey.org/~provos/libevent/
- ADV-2007-0647 vdb-entry
- 22606 vdb-entry
- 33228 vdb-entry
- 2268 third-party-advisory
- 20070219 Remote DoS in libevent DNS parsing <= 1.2a mailing-list