Missing input validation of host names returned by Domain Name Servers
in the c-ares library can lead to output of wrong hostnames (leading to
Domain Hijacking).
I've just taken patch from the advisory[1] and rebased it onto 1.15.0
version.
1.
|
||
---|---|---|
.. | ||
patches | ||
Makefile |