From nobody Mon Jul 08 18:08:16 2024 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WHsYg5v22z5QHsG for ; Mon, 08 Jul 2024 18:08:23 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2101.outbound.protection.outlook.com [40.107.89.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WHsYf6H8bz4SQX for ; Mon, 8 Jul 2024 18:08:22 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=redcomlaboratories.onmicrosoft.com header.s=selector1-redcomlaboratories-onmicrosoft-com header.b=FMUdx6BN; dmarc=none; spf=pass (mx1.freebsd.org: domain of stephen.wall@redcom.com designates 40.107.89.101 as permitted sender) smtp.mailfrom=stephen.wall@redcom.com; arc=pass ("microsoft.com:s=arcselector9901:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DvD3KeBQM70CwISoot1N/SYTyIWlKAsu8IAwWoz49kQqwH+TEIR0jmBytwC45v+XQeXfQ/l3ilRKObbZIjzqB3N4pDyixFYFlzvejmWQOcelOWNjuTqnDeolCX3boeyWC1JD6V47oHFDfoHMaqLMt5ESRKWpYSnpOxK++yOKevBvTdWGgCatWq21uysPUx21a6qKScfeBqgaM6pTJt0gMLzVshqrHJK8xytuCiobwIcil0yvJuCFxUyxH/ime/718YroCAKL/fUyeYHh72DeRo82eQaR9b/aVtdenfdjARlPOxRWeRNm1r3yZOykhGTqmaygKuX/DFmvAbzt1JaghA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=nAql6z0r5JXTbcWELLpNqS3e9qLbQNTsHY/RNF9abc8=; b=VYH07UOSLLJEkun7s9XwMvZYuD9EY99/hOu88QhTUfG30DxBhYi7pdFpvG9TCMaAtmPktvuA/DpX3g8KQzC92sdOrmR6oUaAjU1LGvKG0c5wOkn6HimhhodsD+yHV9/NE5s36DLwCbwfigdmJDRPXif15poWlijuYt/cVflbwGSDT7NRLgj1Hm1EG0ImJe+BiVywZEMptUIxbD8jSbXWF5BDkPh9/ovzYEACt8LC9XvvqjlYNyj3kTvyGLWihJ/D89A+ATXkVOxYimgLDnGp6G55Nb/vicXYsb0VrufPTHDrfxYB2F4iARGSXIxxkxv2LMUfimDeCmNUpZ8fGkiCuw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=redcom.com; dmarc=pass action=none header.from=redcom.com; dkim=pass header.d=redcom.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redcomlaboratories.onmicrosoft.com; s=selector1-redcomlaboratories-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nAql6z0r5JXTbcWELLpNqS3e9qLbQNTsHY/RNF9abc8=; b=FMUdx6BN6Xj/ceSl+2Kw/zN0z3HB+nb4sKWd0vgt8cyRvi8O6Wr7idZZV1y477qFdT3ucjbR9NknkyCxjwTT/MObSEwHti4x0vnEkG2BCCzkcqXdEfXDo/95/oHKnAHj8A/dKMNhfMJ/rJDk3VZgfCl6dzREDINvPVb8uAl8J0sofnJ9s6AIdma+Kq0JHg0Kgh3jQ6IqiYR5nt2/xM2rgb7KxwnGjmSIUPV8fc1xmNCSon7CkoPjpd3d5RZII0iiGWttusTH4S3pEDnEIWgenZLQrdxMHlyK/2eP8abEMRamXp8byYZLeB/Z9uLyItcirO67lQnq15OdGz5M8uFjNQ== Received: from MW4PR09MB9284.namprd09.prod.outlook.com (2603:10b6:303:1f2::12) by PH0PR09MB11742.namprd09.prod.outlook.com (2603:10b6:510:2ad::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7741.35; Mon, 8 Jul 2024 18:08:17 +0000 Received: from MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e]) by MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e%6]) with mapi id 15.20.7741.033; Mon, 8 Jul 2024 18:08:16 +0000 From: "Wall, Stephen" To: "freebsd-security@freebsd.org" Subject: RE: CVE 2024 1931 - unbound Thread-Topic: CVE 2024 1931 - unbound Thread-Index: AdrH8HE4aG8eCTkTSMeV03DrXWBN0gCY2pKWALz8PbAAFkSgAADv20jw Date: Mon, 8 Jul 2024 18:08:16 +0000 Message-ID: References: <86jzi71tjx.fsf@ltc.des.dev> <20240703162938.7459b610@slippy> In-Reply-To: <20240703162938.7459b610@slippy> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MW4PR09MB9284:EE_|PH0PR09MB11742:EE_ x-ms-office365-filtering-correlation-id: cfa34681-fd64-431f-4396-08dc9f78f0ea x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|41320700013|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?WkhMcm0yOTlTZkJwOFpodloweFB3M1Y4MWhKcjdqR3Nma29KbnoxeXRyUnIr?= =?utf-8?B?WGUrcTM4dUNPNFpVNHh2UFpkUUN0SjVIcDU4ZFhDOExDNTg2YStZZUhEcEU4?= =?utf-8?B?T2hncWxWU1VhVlM2TzRHRVVkclY0ejRJRWl6NUxBVjA4TlJUZmR4RDcxZThh?= =?utf-8?B?TGVZa0o2RWtoSHRReE9DVGpuNm9lMGlLYXJKS0Y0NDlWdFh5ZjJxQWQ1RE93?= =?utf-8?B?N1dZNldpUWJOZjJYMzMrNGtwUWpFc3lQTVBXT3IramloZGxaZ2s4SDBwdzZq?= =?utf-8?B?V0h3NzREN2YwN3dHUHM2NDlhM29QY0YxWkVlQ0xjZjlIWGpRZFE2M2czWU4z?= =?utf-8?B?bURVaW9jV3pabmd0eWtmVklJc3V4ejI0SnZORGc2RGp2dmtlQWRmaXRpUFVt?= =?utf-8?B?ODhSelVoRmgxNDBYcDZXTGtGVEdnUHJJTDc5VDE4S3ZuaUYvRjEwQzBFT3B4?= =?utf-8?B?cnhPeVFYbG5pSmlxQ1RLRlVRUGNyMGVHNUlCaUE4R2p5TkpGZkVZcHc0WjVG?= =?utf-8?B?OXdXWW9yYys2Zk9NNzBnNFlKZ2NwWkFJQUx6Q2ZGRHRFV1RwaWlUSk1iZVR3?= =?utf-8?B?ckxWMmVXcklEU3EwRy9UN3lnYWZ2cE5FaXE2cGhSUHVRVi96a3RaRHdKMFVm?= =?utf-8?B?OGY1MjZ6bHVqODhvQy9LLzhFcjJIUVdiYmUvNXVoY1cyTXptY1ZNWVlqd1lt?= =?utf-8?B?aDdwZGlMNVp1Zmo3MzJFSld2bFdGNlQvczZxUGZTMGxpWTZCaE43OVRmNlRt?= =?utf-8?B?eEV2T1BuamlmSWUzelFEWjFUbUg5SW9JVG1WZEUxb3B1MFNLQUoyMkhET0tN?= =?utf-8?B?eEYyWkV1TEdZdVNEMlI4WE1mZFM2aytZSENFbDgxSGtYdGNhZHNqcXFKTEpl?= =?utf-8?B?REtkN0hjVEpZdnB2UDhkMHl6emhiL1hRWlFmL3RtRFBUWklIdGtsRlFrYUlF?= =?utf-8?B?cG5kbTRZNEIrQWN3UzhsMWtOUDIrQmhiRk1EODl4Ynd0bHBYb25hRXhaNWVq?= =?utf-8?B?dU5vbzg2NktTSVJPd1Y1UlkvZ3F3RDR0RG9yV2h1V2xRUnFQZVY3THovMzFw?= =?utf-8?B?KzdDM3BCbm0zaEVFMHh1MHFucXpNN0MwU1FTclArNDU3WE1paTdYcFhYelZ6?= =?utf-8?B?MDBFcUVRRGxPL3pZdjBJZFRkRXlJS1ZHTTFIdEpYc3J0SmU4bXBxWFZWWlZl?= =?utf-8?B?RW9hOEdGSVhTb29WWGFQZU9jdDNONW9oc3RiMFRrNUk2NmM0VXU4NVNYQ2xv?= =?utf-8?B?bEJmVExVRSt2cllVS3VtdHIzaUwza1F6bExMRXdPelcrWTB4TTZlWm80Mm9Q?= =?utf-8?B?VlRwWVNIelkxTDNxeWFrSkRxeHJLTTkwQ2xOZzlWcnJNVXplWWJmQjZvMjlX?= =?utf-8?B?eFNCWi9TcGhCUTNNTk5QcXYyb0drdnB2emZNZ3ljeGxMQ2JPSndpczB5SzVF?= =?utf-8?B?NFR4V25ka2RwOHdzUXlWZzYvdVZ5cVFqZ0tQL0pLWlUrZ1FNVndUVUtJcUk3?= =?utf-8?B?R0lWYitLSis4ZjFLNkFyNmVxT214MHBHY3ZWeTB1d0trMlAzUVBxQTBSNjlZ?= =?utf-8?B?c1VZdjBkamdOWFg0em8xU2pJbWNIdkZvaUoyL2N1YlNFY2JJTXpaRFV6NWto?= =?utf-8?B?bUR2UWVJK2pHODVFS2xrT3hycWZnNUNoWnlhcm0vN1VHbUZidnRBWGJ5UmtN?= =?utf-8?B?MzVnYngrd3RLdU5LdkV0d09TZ0E4RHFxZ3NNbGdjdDRPUjkzeFpBK1pCRWZP?= =?utf-8?B?a1hKYjVtWjhSSmVmRzJyUlB5WktUZSt1cDk5dlZtRDVSbE5pWFp4dk5JeFJ0?= =?utf-8?B?ajlZZndpV3lON0ZpcHVRRnBGeHlRMHJLb3A4RGtyandKMmROd2cyZUR2RlpD?= =?utf-8?B?bU1JNDllZjI1Rk0wbnhsMUUxbHY0dTVId1d5dndibzA3UGc9PQ==?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR09MB9284.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(41320700013)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?cUkxYWQzVlRDYkVuTEJpZWk4V3k2eTE2U0RORDF3QjBtYmFBb1Q2bEMrMXZS?= =?utf-8?B?QlBkWGVYckFFUUF1UzNqemJpZS9iVElpL2lMZDdpSDJIMTNFT1NZV2VGYXdp?= =?utf-8?B?WGZTalJaNWxFS1lWSExhSXBQRnFIL0t6bDc3QWVPVjNySUlxTWJKTDdmemw3?= =?utf-8?B?YmNoMnNEMjFXcmxZWlZRQ1RSQWd5YUFOUFplczhYUlhpMGpzdnhUamJOY1Z3?= =?utf-8?B?M01xV3lOaDVXRTJGVnNmQW5wazdlaDkyMW81MHY4eHNyQUtVbk9wVVRTWHA3?= =?utf-8?B?djIxRlRpRTlRamZNRGlSQitYMEx5N2w5cUlyUERhOUhMOW1lNUhXTDVrZG1m?= =?utf-8?B?YUtId0lYN1BLM1FQWGpnZlhORGNuK2Vxa2JYam1MaWhTWldWTUUwSXl5WmxL?= =?utf-8?B?dTFDTDVGaXlwQXlVWlVWU0lLUEpuMC9GK2VkSm9pSmoxNmdkOHFKSUJ5MG5a?= =?utf-8?B?VyttcEo4MG9HR2NpMEM5ZVJZT1VFTmlXL0ZXTHRBR2M1K0I1TUI2aXVUZ0pO?= =?utf-8?B?djJ0YjA5QmU5SlZkdzV2cHZuNytBLytUemdpMGhMenZSVGQyRmVYNkhTWUFN?= =?utf-8?B?b2lRNUF6YnRmb1JlQ1VWT0k1K3VsRFZZbkZKVGI4MnZmdjhidWNPUnRybHg2?= =?utf-8?B?V2tkd21DZnkxNFVvWWduZGZqenVYQmZhQlhqTEJWVzdwd1U2VWdEZ1Z3VGZJ?= =?utf-8?B?dU9CdWJQaEVtL1VqVjZ1dEkyT2Z6TWhSVFhzRmVGSy92dGtyaTQwMjVVRnNu?= =?utf-8?B?OWNmcGQyeDR3Q0crZHBmOVpNL014S0ZEOEZMY1JJUzltYkJnM1paOFo4cThy?= =?utf-8?B?K0l3N0xodVVHeXhoNjRSVlBLVCtvZzIxdlNmSWRGZTBkcjV5NzQzTFZWRUYr?= =?utf-8?B?UGFPRUVVOW0vMkEwNWprVEp0K2hHSnBaQ1dEOWFsemJ6ZFFMRU1Xclgwenha?= =?utf-8?B?R0ZKdWt3UjhJU0hRNTdSQU1LRUtkMTFTVUY1RVNFKzdKQWphZFI0VHRrMUx6?= =?utf-8?B?UytFdUFNWmZRSHJoNDA1V29uSFZyY1loRmJ1a2gwUDBiYllUdHptRUNKSUNM?= =?utf-8?B?RUVQeEZ4REw3cUFMdE1mc3FMNXNpQ21FbktSMFVHWVZPUTNIVXZVT1RpaktO?= =?utf-8?B?eTdJczBWc0Mrbmw3cDlMT2JPTHV0aXBVZ256QlJQelYxdnB5RlNOb1NDQ0FW?= =?utf-8?B?STg2Y1EwVWMxWk8zTWhhYngrTzh5Y09Fb3djWFYxYXpOMUVoM3V6ZDgvd0c2?= =?utf-8?B?eHVuTHFoRktVUUdiZUQrbS96Y0NaY0ltVFk3Q09yVk9aSGhtaDNLalVRZ3Vw?= =?utf-8?B?Ti9VdnRHRFVJVklmVE5xN3ZCR3FCYm5qUi96OHNLVmt6K3dlNXlETTVnL1JP?= =?utf-8?B?SVlpS0V3Q1FCTmoyRTdNemNiTTJVcGlZU0NLcFA2Tk5ITTlCSnc1SVFEMHUy?= =?utf-8?B?L1NZNm0xRzFqbEF0bnhMaDlWNkVVV3BaUTgrMnY3MXRrYmgxa01MZ05nYVR4?= =?utf-8?B?TSs2alMwaHlsSDN6N2p6c1JuYXo2b1ZSSVlNcmltamdWZW5EQ2thUmI3TURC?= =?utf-8?B?dlE2TkxNTzBWc1ZGU3FMaXRaMWtuVkVMYmNsSVlsRS9wbXhzWWtUZ1YyVmhH?= =?utf-8?B?b3JlUUhCUVFCSkoyTkNkempQK2tucGtydks5RlpzQmRGQ01tRjBudXZ2SmVr?= =?utf-8?B?elBEZzBZRnlKaDVwS0psa2ZBcFJTMmduZjBQYi9ZQnhKYUlMSnlLZUY4R2pW?= =?utf-8?B?U3JoQ3V0S3liS1F2Zk5Rc0plR2ZUOVBHZ0VaQmN1UW15eElXYlJ3STBiL3dz?= =?utf-8?B?M2htaExnWXcwajBBNjlHQVl2bjhMYnNFUDZwd2toTjk3d2NlN2locEVwNUUz?= =?utf-8?B?ck41UVA4MWoxb0MzSWtlQjludU9VV2VZWnBNRjN3SWJwOWswTlU5Z0hLS0lL?= =?utf-8?B?SHpFbUZaOHduVlJsWU5qWUhIMXk2WHdQZ1g0TGg0cktXOFZNYURRVzl3c1pN?= =?utf-8?B?OThIQU02MVFMc3JESGdERTd6VXdoOEV3eE9tSUcvTExsZTVTYmpFN2Z3TnJk?= =?utf-8?B?Nnh3YkREL1htcjZsMjkvbzlTRmEzM2tsME1LaFhsaDJCamo1K3dMaXF3bnZz?= =?utf-8?Q?TVIc=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: redcom.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MW4PR09MB9284.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cfa34681-fd64-431f-4396-08dc9f78f0ea X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2024 18:08:16.6049 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 86200ba5-6348-4d6f-bdd7-96f43e8d9247 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR09MB11742 X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.40 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; MIME_BASE64_TEXT_BOGUS(1.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector9901:i=1]; NEURAL_HAM_SHORT(-1.00)[-0.997]; R_DKIM_ALLOW(-0.20)[redcomlaboratories.onmicrosoft.com:s=selector1-redcomlaboratories-onmicrosoft-com]; R_SPF_ALLOW(-0.20)[+ip4:40.107.0.0/16]; MIME_GOOD(-0.10)[text/plain]; MIME_BASE64_TEXT(0.10)[]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:8075, ipnet:40.104.0.0/14, country:US]; MIME_TRACE(0.00)[0:+]; MISSING_XM_UA(0.00)[]; DMARC_NA(0.00)[redcom.com]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[40.107.89.101:from]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[40.107.89.101:from]; TO_DN_EQ_ADDR_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; DKIM_TRACE(0.00)[redcomlaboratories.onmicrosoft.com:+] X-Rspamd-Queue-Id: 4WHsYf6H8bz4SQX PiA+ID4gYSBwcmVyZXF1aXNpdGUgZm9yIHRoZSBEb1MgYXR0YWNrIGRlc2NyaWJlZCBpbiBDVkUt MjAyNC0xOTMxLg0KPiBEaWQgeW91IGFjdHVhbGx5IG1lYW4gQ1ZFLTIwMjQtMzM2NTUgaW5zdGVh ZD8NCg0KSSBtZWFuIENWRS0yMDI0LTE5MzEsIGluIHdoaWNoIHVuYm91bmQgaXMgdnVsbmVyYWJs ZSB0byBhIERvUyBpZiAnZWRlOiB5ZXMnIGlzIGNvbmZpZ3VyZWQuDQpUaGlzIGlzIGZpeGVkIGlu IHVuYm91bmQgMS4xOS4yLCBidXQgMTQuMCB1c2VzIDEuMTkuMS4NCg==