Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-1425

Высокий

ALT-PU-2017-1425: package pdns update to version 4.0.3-alt2

Источник
errata.altlinux.org
Дата публикации
04.04.2017
Дата обновления
04.04.2017
Устраненные уязвимости
8
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades pdns to version 4.0.3-alt2.

Устраненные уязвимости8

Ссылки1

ALT-PU-2017-1425https://errata.altlinux.org/ALT-PU-2017-1425

Связанные уязвимости

ubuntu логотип

CVE-2015-5470

ubuntu
около 11 лет назад

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.

nvd логотип

CVE-2015-5470

nvd
около 11 лет назад

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.

debian логотип

CVE-2015-5470

debian
около 11 лет назад

The label decompression functionality in PowerDNS Recursor before 3.6. ...

suse-cvrf логотип

openSUSE-SU-2017:0183-1

suse-cvrf
почти 10 лет назад

Security update for pdns

github логотип

GHSA-vh8j-jj36-28wq

github
больше 4 лет назад

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.