Re: CVE Request New-djbdns: dnscache: potential cache poisoning

[P J P <ppandit () redhat com>]

+-- On Wed, 12 Feb 2014, Michael Samuel wrote --+
| >  -> http://www.openwall.com/lists/oss-security/2014/02/11/7
| The same issue, different result.

  Yes, true. Thank you for confirming.
 
| The described issue would result in expiring attacker-specified (but
| not more) cache entries at approximately the same CPU cost.  So
| this is something else.

  Agreed.

Thank you.
--
Prasad J Pandit / Red Hat Security Response Team