Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:01745-1

Опубликовано: 29 мая 2025
Источник: suse-cvrf

Описание

Security update for dnsdist

This update for dnsdist fixes the following issues:

  • CVE-2025-30193: stack exhaustion when processing too many queries on incoming TCP connections leads to a denial-of-service (bsc#1243378).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise Server 15 SP4-LTSS
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise Server 15 SP5-LTSS
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
dnsdist-1.8.0-150400.9.6.1
SUSE Manager Proxy 4.3
dnsdist-1.8.0-150400.9.6.1
SUSE Manager Server 4.3
dnsdist-1.8.0-150400.9.6.1
openSUSE Leap 15.6
dnsdist-1.8.0-150400.9.6.1

Ссылки

Описание

In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of service. The remedy is: upgrade to the patched 1.9.10 version. A workaround is to restrict the maximum number of queries on incoming TCP connections to a safe value, like 50, via the setMaxTCPQueriesPerConnection setting. We would like to thank Renaud Allard for bringing this issue to our attention.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dnsdist-1.8.0-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dnsdist-1.8.0-150400.9.6.1
Ссылки