Gentoo Linux Security Advisory GLSA 200801-16
https://security.gentoo.org/
Severity: Normal
Title: MaraDNS: CNAME Denial of Service
Date: January 29, 2008
Bugs: #204351
ID: 200801-16
Synopsis
=======
MaraDNS is prone to a Denial of Service vulnerability impacting CNAME
resolution.
Background
=========
MaraDNS is a package that implements the Domain Name Service (DNS) with
resolver and caching ability.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-dns/maradns < 1.2.12.08 >= 1.2.12.08
==========
Michael Krieger reported that a specially crafted DNS could prevent an
authoritative canonical name (CNAME) record from being resolved because
of an "improper rota...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.