From 9373947e60bfd9799fef63723ec13c6d37f00993 Mon Sep 17 00:00:00 2001 From: dmiller Date: Thu, 17 Jul 2025 20:10:32 +0000 Subject: [PATCH] Use less ambiguous term for stack overflow (NOT buffer overflow) --- CHANGELOG | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 62f8c6813..39f27a920 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -4,7 +4,7 @@ o Fixed an issue in FTP bounce scan where a single null byte is written past the end of the receive buffer. The issue is triggered by a malicious server but does not cause a crash with default builds. [Tyler Zars] -o [GH#3130] Fix a crash (stack overflow due to excessive recursion) in the +o [GH#3130] Fix a crash (stack exhaustion due to excessive recursion) in the parallel DNS resolver. Additionally, improved performance by processing responses that come after the request has timed out. [Daniel Miller] @@ -373,7 +373,7 @@ o [Ncat] Addressed an issue from the Debian bug tracker correctly used in the ProxyCommand option of OpenSSH. o Improved DNS domain name parsing to avoid recursion and enforce name length - limits, avoiding a theoretical stack overflow issue with certain crafted DNS + limits, avoiding a theoretical stack exhaustion issue with certain crafted DNS server responses, reported by Philippe Antoine. o [GH#2338][NSE] Fix mpint packing in ssh2 library, which was causing OpenSSH