Project

General

Profile

Actions
Copy link

Security #8725

closed
PA PA

doh2: quadratic complexity due to buffer not being reset

Security #8725: doh2: quadratic complexity due to buffer not being reset

Added by Philippe Antoine about 1 month ago. Updated 9 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Label:
CVE:
2026-71418
Git IDs:
Severity:
HIGH
Disclosure Date:
GHSA:
GHSA-xjgq-3qw4-jp5f

Description

Found by oss-fuzz
https://issues.oss-fuzz.com/u/0/issues/530960705

The buffer used to process http2 data frames for DOH2 was not cleared after processing.
That means that multiple HTTP2 data frames with flags EndOfStream made the buffer keep growing until it reached its 65K max, while having a quadratic complexity

Subtasks 1 (0 open — 1 closed)

Security #8726: doh2: quadratic complexity due to buffer not being reset (8.0.x backport)ClosedPhilippe AntoineActions

OT Updated by OISF Ticketbot about 1 month ago Actions
Copy link
 #1

  • Subtask #8726 added

OT Updated by OISF Ticketbot about 1 month ago Actions
Copy link
 #2

  • Label deleted (Needs backport to 8.0)

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #3

  • Status changed from Assigned to In Review

Gitlab MR

JI Updated by Jason Ish about 1 month ago Actions
Copy link
 #4

  • GHSA set to GHSA-xjgq-3qw4-jp5f

SB Updated by Shivani Bhardwaj about 1 month ago Actions
Copy link
 #5

  • Severity set to HIGH

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #6

  • Status changed from In Review to Resolved

Staged

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #7

  • Status changed from Resolved to Closed

VJ Updated by Victor Julien 9 days ago Actions
Copy link
 #8

  • CVE set to 2026-71418

VJ Updated by Victor Julien 9 days ago Actions
Copy link
 #9

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom