Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

Debian: DSA-4063-1 Critical Advisory: PowerDNS Recursor DoS Risk

debian
Calendar Grey December 11, 2017
Debian Logo
Debian Security Notice regarding pdns-recursor addresses potential denial of service vulnerability. It is advisable to update to a secure version for the stable release.
Toshifumi Sakaguchi discovered that PowerDNS Recursor, a high-performance resolving name server was susceptible to denial of service via a crafted CNAME answer
Topics%20covered

Topics Covered

security advisory denial of service critical debian pdns-recursor

Summary

Toshifumi Sakaguchi discovered that PowerDNS Recursor, a high-performance
resolving name server was susceptible to denial of service via a crafted
CNAME answer.

The oldstable distribution (jessie) is not affected.

For the stable distribution (stretch), this problem has been fixed in
version 4.0.4-1+deb9u3.

We recommend that you upgrade your pdns-recursor packages.

For the detailed security status of pdns-recursor please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/pdns-recursor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: pdns-recursor
CVE ID: CVE-2017-15120

Topics%20covered

Topics Covered

security advisory denial of service critical debian pdns-recursor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.