Debian GNU/Linux Information for VU#203611
inet_network() off-by-one buffer overflow
- Vendor Information Help Date Notified: 17 Jan 2008
- Statement Date:
- Date Updated: 21 Jan 2008
Unknown. If you are the vendor named above, please contact us to update your status.
To our knowledge, this vulnerability has already been fixed in the GNU libc resolver in 2000; no current Debian release is affected as a result.
The bind-dev package contains a copy of the vulnerable BIND 8 code, but it is not used by Debian.
The vendor has not provided us with any further information regarding this vulnerability.
There are no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.