From nobody Mon Jul 8 18:17:47 2024 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WHsmb73bRz5QKG0 for ; Mon, 08 Jul 2024 18:17:51 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2109.outbound.protection.outlook.com [40.107.89.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WHsmb0vtQz4V1j for ; Mon, 8 Jul 2024 18:17:51 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=redcomlaboratories.onmicrosoft.com header.s=selector1-redcomlaboratories-onmicrosoft-com header.b="gtSgr/Jj"; dmarc=none; spf=pass (mx1.freebsd.org: domain of stephen.wall@redcom.com designates 40.107.89.109 as permitted sender) smtp.mailfrom=stephen.wall@redcom.com; arc=pass ("microsoft.com:s=arcselector9901:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=G8EIhxeslwVS5vCsO9v+mVjfEQondaL2UDTR43A2EPrsWL4/ulCcseNlnnTnhlcyDmqqp4o+dX2z8CZCGz8W2Dx0X5PZQAFg9b4sUMVM+Gkb1WQmGZ9qH8VNcaaNOElGf0wux/cN+VF9Y0M0AOK/TKgquTTxUX5sDlErUgbguP4+Cm2i82KBnp1xr9+W2CKKGq9WX+I3hmFuCBSJl4BF5K5MWpaFRyfx6KSg8w4PTRMhOeZ19jB/08Cah/SmjPWkZVwBhU52KpDFDVPvf9lwHs36dMUiZQQCIRG8pKT7lcPb1nyAAX4ivOAFSrEBzcXaXdWQUEKivfN+4p0sEEBD9w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=0baBGZkH6LoQQh+mfaPZZYglkIjhFaVfs9xdEHUz4ts=; b=NAjGiWln8YDyoiXeLYF/A0kkzsgZdaP35cEokbEmet9zSFHoHm9/LguQiKWlXKW2+nnnw22+1XG+9GrpnDnWGDBz7fj5vAjTJgVpuxpVEuhgOYfx8hWxyo7NsTbr7BVcHKbYlv7Ub9AFjMka+q7usubKwwXMoYCM4mpn66HDugAK3bma0R5po12+5ulM8GgEgH5ZXHeOEvH7AunY6pEcA1LZtYV6k+eUWmmzquAEWYkUhF5dPzrspIIAQY8r1yT9J+OfYdDnxCrGWKYjBC/HF4ZkbJlHWfiOTeF75BztqApOXZCG46N3qAxsFzvmBjbz1KpLppSDNeLhHr9tb2XhNA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=redcom.com; dmarc=pass action=none header.from=redcom.com; dkim=pass header.d=redcom.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redcomlaboratories.onmicrosoft.com; s=selector1-redcomlaboratories-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0baBGZkH6LoQQh+mfaPZZYglkIjhFaVfs9xdEHUz4ts=; b=gtSgr/JjnWEsj6Z+JKL9gznLhUfUXpjaLGHaXeQUKeK2vDc24tqyFuY3yKqKLH3oXRUzAnugzFYw3XmVvNhcGEYuEuW4A8L/vyvX5suh+jMnYyC/IEVFqJUXV7XNPsjhXEz9BU+A+Qt01HejQPt8bfqfEH7A2miubOzR6cPrgLn9NwHA9Lzf6gC2n2ub5mu4R2NNADDEvX+oOvTd6QyUa6GRbsdUH0qN6ZCHyqCr3+6XDZGsx8Kx8ywjKucnwchhSvD8riOrNAbyO6AoWCC9L//5bY4WILEt8n4K1g44zo/ubIoWt5Yse+GxaOCAUYaAz4LluqmufhHdXhiFvkXUtg== Received: from MW4PR09MB9284.namprd09.prod.outlook.com (2603:10b6:303:1f2::12) by PH8PR09MB9850.namprd09.prod.outlook.com (2603:10b6:510:18e::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7741.36; Mon, 8 Jul 2024 18:17:47 +0000 Received: from MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e]) by MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e%6]) with mapi id 15.20.7741.033; Mon, 8 Jul 2024 18:17:47 +0000 From: "Wall, Stephen" To: "freebsd-security@freebsd.org" Subject: RE: CVE 2024 1931 - unbound Thread-Topic: CVE 2024 1931 - unbound Thread-Index: AdrH8HE4aG8eCTkTSMeV03DrXWBN0gCY2pKWALz8PbAA3gAsAAAokOsg Date: Mon, 8 Jul 2024 18:17:47 +0000 Message-ID: References: <86jzi71tjx.fsf@ltc.des.dev> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MW4PR09MB9284:EE_|PH8PR09MB9850:EE_ x-ms-office365-filtering-correlation-id: e6a06d32-1cd5-46d4-81db-08dc9f7a44f4 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|41320700013|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?QUYzbWovYzU2Z0lXaGdmc0Jsd2xaNXdxdHkrNGZCTHEyaHdnU2VFS0haSUNX?= =?utf-8?B?RzlFai9LUXAvNjRNakdsckgrM2ZZR01VOUxUNHlFcDVoNUNIUGxTVDVZVUFJ?= =?utf-8?B?RGtZc1ljak92TjI3ajUxbzJjeHZtcWRVTTJHbklqSjhHVFdVa0V0ZGc0SGpm?= =?utf-8?B?NUh0ZENiNlJrMEpVTGJqdXZFYm9tbVhkRHd5VkIrUHJ1Y0hPckFpTityek1Y?= =?utf-8?B?ZE5ONHltOTJmTk54NnFoLzR6cXlYdStaNWE1ZUtwK1BQTHZSVzJaZ1hYYmtI?= =?utf-8?B?WVpKNWNPUkgyUDJiSHB5M00rcGhBeUtNbXJyQXNseExxQXI5aGE2akhQQXZa?= =?utf-8?B?VnFpUDNSSmtCdGdpZlE4YnhLaEZoRDRGTGFTbTU3bUJXSFlBRFV6SE82OE1t?= =?utf-8?B?dnlYZCttdVBGZDMzODZ2VWJLK3JmZmllbURsTEorV1Q2WmpDWkU0OFBUR1Np?= =?utf-8?B?OXRXL1JFcFY3ZllUNCtMSHVKZ0k3eXM4R09tam5ZRFR0elE0SHpMOHd5MjRr?= =?utf-8?B?cU9sWnlzRk5VVFhBTldET1l3U2VVYTZmdFREUTFRTU9OUnRWeVUwNlZiRzAv?= =?utf-8?B?YVJablFrbGF3RlNRZStIRVRwTldDNVY1ZC95ak5xb2h6QzZMS1RVMG5wbzNN?= =?utf-8?B?ektsVWU0bm1LdjI3OG5JVzJON2kxOG40OGFKOVZWUGNlQVA2VXphQ3AwVm9u?= =?utf-8?B?a3BBZ21NeG1QTDB0WGVsQUNDUStjTzNEWWIrM21nU2lKSEJSWmZRYkV1Ti9o?= =?utf-8?B?Mm1CSHNYOTV0V2NmQS9OTjFTNVR6T0ljSEYwckpZbDJnWHpDTE8yczBFL0hF?= =?utf-8?B?WjRHWmhQK0h5b25PbkZ5SUg4U2pMb0NmRlpRdjFrRExEd05TVEFib2tUNU1m?= =?utf-8?B?MGlrTC9JcmJNaXN2dXdrMkpWZjR2YnJWOEZmUFM3K1lmS21CSUkwREM1b1VL?= =?utf-8?B?TlRjdjVkdnZUODA3dkFQc1F2M2d0WmxxakhCUXRnV21IUGVhYWZQdVU0Y0l0?= =?utf-8?B?SXdseVA2RkpBeTBacTUwZXk3WURISW1ENS80M2RCSHRxS1FkVCtrVmVNWU5t?= =?utf-8?B?QUFBQ3c5N1ZGN2trSjFIZXBxbHQ4Wktodk9UV1hESCsyYW1YSFFOdDNuM0Uw?= =?utf-8?B?bzZoaEdkcGdUT1lMOTJNUno2NzlTQStiekpKUzFVc2x0bkdYdHJINHA1V25q?= =?utf-8?B?UEgvUDhUdEpPeEhJUngwa3VDRmtpbmZPbkMvK1lBRW9SM3NlZnhMSjRMNGxY?= =?utf-8?B?VzFGc1JBSUpTS2NrcWVVSzdCQTFXL3k4cVg1VDZvUCt1NHlzaG5EWU1oRU5n?= =?utf-8?B?SlVZR1dmZkx0M0FMRUNTK2M5czQvSEp3cXNXNDR4SWsvQVpNOWdkZ0lKTVZY?= =?utf-8?B?L2hhU1ByZmRWZEpKaXRodVlPNytpeWEvMTA4Wkc4dmtkNUdVOCtFWXhIWXhs?= =?utf-8?B?YTBhN3JqMTQ1bHVINjlOMzE5ZVlQckFyMVBHUE95MktnTkw5c3NXcXR2ZXVN?= =?utf-8?B?SnJJbThGWVNmVlM0ZGlZc2puTFlEbS83MVAwOHpLajZBakhQUXE4eWJGc2pL?= =?utf-8?B?Qmk5NFR0R2pnQll5cUJveGNYQ3g0R25OUzZYL1hMOXZaQ2lNYVcwREI5cCs4?= =?utf-8?B?SG9NQTcrZFpIU2FCMTI5Rk9RdFFCdU5XM3NmRlI0UU5zWVRlMGxZZVFON1Y0?= =?utf-8?B?YzhzS2pFU1hTT3o3dmtDS0d1aElHakxQbUpUNFlaYjA1TVN6dHAzQXkveWZ4?= =?utf-8?B?WnR0R1VSSDRRQ3EvVjZiUFdoY1BNR1R4Q1BLbDFIb1Z2SnY3VC9KM3J1dEtP?= =?utf-8?B?bGZqb2VORTdJZzd1cnBlZ2grYjhWU0dBbGwzMU4rSTZyTHpLNk0vTjg5d0Vs?= =?utf-8?B?MFdCeTFxZDh0Q1NZZVNHWkgrMlB4Wnp0bi8wTzU0bzhIOGc9PQ==?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR09MB9284.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(41320700013)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?WWJKajBiSWROV1BQY2paRFc5RFFjZFFYdnJSajEzR3VlSXdpc3o5R1pGUjA5?= =?utf-8?B?ZGhITU1FRnZQdkpFbkhGZ3ZTdEhFTVM5dkk4Z0pudE5UNXY3V3Z3Nk5Sb094?= =?utf-8?B?RjJpbkJRSDZVYnVjeTR1NmJHLzhsdUFWN0l0MkF4NXFmNHFuZStFUDdhMnV2?= =?utf-8?B?S0FNcUNKbk0xL1V0Mms2Q3BwNmNORUpmampJVzUvc1FsemNoUXppdlhxUlo2?= =?utf-8?B?cEhyWUxLblZwRW1mcmlEQThuQTk3eTJWTlhrMCtZclJOblVRSEx4bURMRmJV?= =?utf-8?B?b2ozTHgycGtvengrUWNld0lEYXl2MHFUS2hrZ0JYWTNoR2tlU2FQK1RYNGRY?= =?utf-8?B?ZTc1T01abEVNVUI3TGtUckhOZFlJMW5nTUdGRlNOVUliQzkzZk16OThvVVdW?= =?utf-8?B?S1JEK3pjMkkwYjdWajRwckdranE3UWU3OXJmekV6R1RPZE9sekpVeVZVc0Rh?= =?utf-8?B?Z3psdCtGSmRUMDBkMktkK1FwSGpKOEdoMnNPb29rZ3JtWjBETW5HV1l5bVEr?= =?utf-8?B?ZTUzZjlncHZJN1h5OWk3REhWVEh6ckNxVWplK2FacFEyRDBLV204OWdJelFE?= =?utf-8?B?bFl0WkZ2RVNFUGlNQ0xKNHNMWWxIYVlDNmJwUG1QeGFRNzVHVU0yTlVqOFZp?= =?utf-8?B?bVowMjk2SnEvNldxRWR5QWhLbEFESDluS0hsUTE0c0FsZ3Z3eHlKRmhXRU9T?= =?utf-8?B?UGV5WitOVkJwVjFIMWdEQlFWNHdYZUU2b2MrTldIMmoxdVEwaXdWR0k5U1hn?= =?utf-8?B?SllCajNSbmdXeUdwZ3ZlSmN4SlRYdWROWEdnSmN0TXBOS204YVBKdGtJcWtY?= =?utf-8?B?eFVEQXdmSTRUdWh2TlRsVmc3VHNvcWUrVWdmWko0MnNneklsbWczazl5bm5E?= =?utf-8?B?TjUwWXd6dEZmRDhLN1VaWlVrSzJHVFk4U1YwV0k2NkhXUGZKSytFZlNsSnB2?= =?utf-8?B?QjQybWtyMEVoTVFGK1RML1M0YWlpL3gvYTRGWmhGcEpQOE92OWtGM3VSUVVw?= =?utf-8?B?Z0hic0ZzNnNsWlFHNlM5MG1Tb1JuTUx0UVpYVFczTklXcmpGY0pqUXpEMHF0?= =?utf-8?B?TkhyOUdSUkw3UnFJcTBvNFgwTUlvRFpNMVVUczdNOHQ3Q3dKaUQxaUZOODJ4?= =?utf-8?B?OXZyYlFzaUFuNUU5NkNqQUFZYXdWckxBZHdOTmw3a005U3orTExqWnh3YThZ?= =?utf-8?B?VjFGL005WUhnMTRRWHNQdTVnYlhWZ1J3TE5jOVkzNGhreXo5Mk51ZnZJMTBB?= =?utf-8?B?Q09vT0Rid3RISVRUUHFvT3BvYjUxRmFFQTJBZzFnbkNLRGVYbWE2VTdNNHlt?= =?utf-8?B?VDZiRGl2TjBNWDRhU2Y5MjQra3kwQzF5dHVvMWZVR0kvK3dWRUI4NzNJVUlt?= =?utf-8?B?YmdCek5aY2FKOFlmT3lYcWdkNTZQOEdoV2NmWVBBU3FvdStvNXNsaytJUHlk?= =?utf-8?B?SmdjRmpLWmJoSjJzUnRKOG9YeVJqeUtzQU9iZGRtZVhuMmFSOFh2UlRxVER6?= =?utf-8?B?UVoraXV3OEg1aHIzVkpZeTkwelorVHU0UExUQVlJaHdrcXM0dEJ3RFdiYlh2?= =?utf-8?B?d2tpVWhHRUl2WUZBdHVKN0hkT2UzbjNCbkdybElmazhmZTZOYms1YnRwTEky?= =?utf-8?B?RXIybDBoR2hSVkFmSmxUTjloMnlGUzZRYTM0UXR5cVZ5OE1IcmZLY1ZVK3hn?= =?utf-8?B?MVNnSEd4cFJBa0dXUEx0TW5lZWlDaHZXQjdJM2tvaFliWEdlUXJNS1hGcGtt?= =?utf-8?B?Ykg1YUZVVTMzeW5Oay9UcmVyMzR4WndhN09WU3N1VFZPdzNBYmhxVnZ2a2RN?= =?utf-8?B?b2pzeGVxSVJ0T0h6N0w5OUF5bG9Rc3dzcStyR2NsS2dra2hTbldzSGgwM0Rx?= =?utf-8?B?SGxBM3I1OW9GVGoxQmJMK21wVTYrU3NEYzJmWUF3ZDllVEZ1M0N1bzY0aHdL?= =?utf-8?B?NUJ2UWZCTnBIVTJ6alFWb0RRUStDdGMrYzlHcHg4VW56TmxiUXBocjFjOEdw?= =?utf-8?B?K09RMnhoMmROU3FOSEtrMjhDRnV3SVNUNXV2c0IzamVxcXVTTlZsUGkwVHJy?= =?utf-8?B?Tk1YVWRoTEFHc3ZXR0xBdkNTemZEeFVsMFpKUWVxOFp2SHhFdVRNL1ZZVXhD?= =?utf-8?Q?n5/A=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: redcom.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MW4PR09MB9284.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: e6a06d32-1cd5-46d4-81db-08dc9f7a44f4 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2024 18:17:47.1388 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 86200ba5-6348-4d6f-bdd7-96f43e8d9247 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR09MB9850 X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.35 / 15.00]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector9901:i=1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.95)[-0.945]; R_SPF_ALLOW(-0.20)[+ip4:40.107.0.0/16]; R_DKIM_ALLOW(-0.20)[redcomlaboratories.onmicrosoft.com:s=selector1-redcomlaboratories-onmicrosoft-com]; MIME_BASE64_TEXT(0.10)[]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; DMARC_NA(0.00)[redcom.com]; TO_DN_EQ_ADDR_ALL(0.00)[]; MISSING_XM_UA(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[redcomlaboratories.onmicrosoft.com:+]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; ASN(0.00)[asn:8075, ipnet:40.104.0.0/14, country:US]; RWL_MAILSPIKE_POSSIBLE(0.00)[40.107.89.109:from]; RCVD_IN_DNSWL_NONE(0.00)[40.107.89.109:from] X-Rspamd-Queue-Id: 4WHsmb0vtQz4V1j PiBJZiB0aGUgdXNlciBoYXMgbWVzc2VkIHdpdGggdGhlIGNvbmZpZ3VyYXRpb24NCj4gb2YgdGhl IGxvY2FsX3VuYm91bmQgcmVzb2x2ZXIgdG8gb3BlbiBpdCB1cCB0byB0aGUgbmV0d29yayBhbmQg Z2V0IERvU+KAmWQgZnJvbQ0KPiB0aGUgcmVtb3RlIG5ldHdvcmssIEkgZG9u4oCZdCBmZWVsIHRo aXMgaXMgc29tZXRoaW5nIHNlY3RlYW0gaXMgcmVzcG9uc2libGUgZm9yDQo+IHJlc3BvbmRpbmcg dG8uDQoNClRoYW5rcywgR29yZG9uLg0KDQpUaGF0J3MgYSBmYWlyIHBvaW50LiAgU2VjdXJpdHkg c2Nhbm5lcnMgd2lsbCBzdGlsbCBmaW5kIHVuYm91bmQgMS4xOS4xLCB0aG91Z2gsIGFuZCByZXBv cnQgaXQgYXMgdnVsbmVyYWJsZS4gIEFuIGFkdmlzb3J5IChvciBlcnJhdGE/KSBleHBsYWluaW5n IHRoZSBzaXR1YXRpb24gd291bGQgbWFrZSBpdCBjbGVhciB0aGF0IHRoZXJlIGlzIG5vIGFjdHVh bCB2dWxuZXJhYmlsaXR5IGluIHRoZSBiYXNlIHN5c3RlbSB1bmJvdW5kLg0KDQpKdXN0IG15ICQu MDIsIHRha2UgaXQgb3IgbGVhdmUgaXQuDQoNCi1zcHcNCg==