]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.20] chg: usr: named could crash on concurrent TKEY DELETE for the same key
authorOndřej Surý <ondrej@isc.org>
Thu, 28 May 2026 09:05:57 +0000 (11:05 +0200)
committerOndřej Surý <ondrej@isc.org>
Thu, 28 May 2026 09:05:57 +0000 (11:05 +0200)
commitdd02abde672e76166b4c8bacf6f274a85b743d3e
treefad89573bd69cef84f8914addd7cb265692bb8f7
parent15474474915e40e8f73169ba817c5127be4d1fc9
parent5fe9e7f6ed39895b4e5ce035ba8a5e4669a8fa5c
[9.20] chg: usr: named could crash on concurrent TKEY DELETE for the same key

On a server configured with tkey-gssapi-keytab (or tkey-gssapi-credential),
an authenticated peer could crash named by sending two TKEY DELETE requests
for the same dynamic key in rapid succession.  This has been fixed.

Closes #6001

Backport of MR !12041

Merge branch 'backport-6001-tsig-tkey-delete-uaf-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!12042