Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 9: 2009-5190 Moderate: Nsd One-Byte Overflow Threat

fedora
Calendar Grey May 19, 2009
Scroller Fedora
Mitigating a single-byte overflow in nsd for Fedora 9 is crucial to protect against potential DNS server vulnerabilities. Immediate action is recommended for users.
Security release

Summary

NSD is a complete implementation of an authoritative DNS name server.

For further information about what NSD is and what NSD is not please

consult the REQUIREMENTS document which is a part of this distribution

(thanks to Olaf).

Update Information:

Security release. A one-byte overflow bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other (system) exploits.

Topics%20covered

Topics Covered

security advisory Fedora exploit prevention DNS server one-byte overflow nsd

Change Log

* Mon May 18 2009 Paul Wouters - 3.2.2-1 - Upgraded to 3.2.2 security release - Removed obsoleted options --enable-plugins --enable-mmap * Fri Apr 10 2009 Paul Wouters - 3.2.1-1 - updated to 3.2.1 - fixed /dev/nul which cause a file /%1 to be written by cron - Applied Ville Mattila's changes to support non-default locations * Mon Sep 15 2008 Paul Wouters - 3.1.1-1 - Updated to new version * Mon Jun 30 2008 Paul Wouters - 3.1.0-1 - Updated to new version

References

Fedora Update Notification FEDORA-2009-5190 2009-05-19 23:55:54
Name : nsd Product : Fedora 9 Version : 3.2.2 Release : 1.fc9 URL : https://www.nlnetlabs.nl/projects/nsd/about/ Summary : Fast and lean authoritative DNS Name Server Description : NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution (thanks to Olaf).

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update nsd' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: nsd
Product: Fedora 9
Version: 3.2.2
Release: 1.fc9
URL: https://www.nlnetlabs.nl/projects/nsd/about/
Summary: Fast and lean authoritative DNS Name Server

Topics%20covered

Topics Covered

security advisory Fedora exploit prevention DNS server one-byte overflow nsd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.