Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:2116-1

Опубликовано: 19 авг. 2016
Источник: suse-cvrf

Описание

Security update for pdns

This update for pdns fixes the following issues:

  • CVE-2016-6172: malicious primary DNS servers can crash secondaries through large transfers (boo#987872)

As mitigation, the xfr-max-received-mbytes config option was added, defaulting to to 100 (MB).

Список пакетов

openSUSE Leap 42.1
pdns-3.4.6-3.1
pdns-backend-ldap-3.4.6-3.1
pdns-backend-lua-3.4.6-3.1
pdns-backend-mydns-3.4.6-3.1
pdns-backend-mysql-3.4.6-3.1
pdns-backend-postgresql-3.4.6-3.1
pdns-backend-sqlite3-3.4.6-3.1

Ссылки

Описание

PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.

Затронутые продукты
openSUSE Leap 42.1:pdns-3.4.6-3.1
openSUSE Leap 42.1:pdns-backend-ldap-3.4.6-3.1
openSUSE Leap 42.1:pdns-backend-lua-3.4.6-3.1
openSUSE Leap 42.1:pdns-backend-mydns-3.4.6-3.1
Ссылки