Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Debian 4.0: DSA 1319-1 Critical: MaraDNS Memory Leak DoS Issue

debian
Calendar Grey June 29, 2007
Debian Logo
Debian Security Advisory DSA 1320-1 addresses vulnerabilities in OpenSSH. Update released to mitigate unauthorized access risks.
Several remote vulnerabilities have been discovered in MaraDNS, a simple security-aware Domain Name Service server
Topics%20covered

Topics Covered

security advisory denial of service debian memory leak dns server

Summary


It was discovered that malformed DNS requests can trigger memory
leaks, allowing denial of service.

CVE-2007-3115

It was discovered that malformed DNS requests can trigger memory
leaks, allowing denial of service.

CVE-2007-3116

It was discovered that malformed DNS requests can trigger memory
leaks, allowing denial of service.

The oldstable distribution (sarge) is not affected by these problems.

For the stable distribution (etch) these problems have been fixed
in version 1.2.12.04-1etch1.

For the unstable distribution (sid) these problems have been fixed in
version 1.2.12.06-1.

We recommend that you upgrade your maradns packages.


Upgrade Instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
wil...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service debian memory leak dns server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here