Описание
Security update for pdns
This update for pdns fixes the following issue:
- CVE-2018-1046: An issue has been found in the dnsreplay tool provided with PowerDNS Authoritative, where replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used. (boo#1092540)
Список пакетов
openSUSE Leap 42.3
pdns-4.0.3-12.1
pdns-backend-geoip-4.0.3-12.1
pdns-backend-godbc-4.0.3-12.1
pdns-backend-ldap-4.0.3-12.1
pdns-backend-lua-4.0.3-12.1
pdns-backend-mydns-4.0.3-12.1
pdns-backend-mysql-4.0.3-12.1
pdns-backend-postgresql-4.0.3-12.1
pdns-backend-remote-4.0.3-12.1
pdns-backend-sqlite3-4.0.3-12.1
Ссылки
- E-Mail link for openSUSE-SU-2018:1384-1
- SUSE Security Ratings
Описание
pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used.
Затронутые продукты
openSUSE Leap 42.3:pdns-4.0.3-12.1
openSUSE Leap 42.3:pdns-backend-geoip-4.0.3-12.1
openSUSE Leap 42.3:pdns-backend-godbc-4.0.3-12.1
openSUSE Leap 42.3:pdns-backend-ldap-4.0.3-12.1
Ссылки
- CVE-2018-1046
- SUSE Bug 1092540