Debian: DSA-2196-1 Critical: MaraDNS Buffer Overflow Denial of Service
debian
March 19, 2011
Witold Baryluk discovered that MaraDNS, a simple security-focused Domain Name Service server, may overflow an internal buffer when handling requests with a large number of labels, ...
Topics Covered
Summary
Witold Baryluk discovered that MaraDNS, a simple security-focused
Domain Name Service server, may overflow an internal buffer when
handling requests with a large number of labels, causing a server
crash and the consequent denial of service.
For the oldstable distribution (lenny), this problem has been fixed in
version 1.3.07.09-2.1.
For the stable distribution (squeeze) and greater this problem had
already been fixed in version 1.4.03-1.1.
We recommend that you upgrade your maradns packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Package: maradns
CVE ID: CVE-2011-0520
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!