Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

openSUSE Leap 42.3 Security Update: 2018:1384-1 Moderate Buffer Overflow

opensuse
Calendar Grey May 23, 2018
Scroller Opensuse
Patch released addressing several vulnerabilities in pdns configurations for openSUSE Leap 42.3, notably a potential buffer overflow threat.
An update that fixes one vulnerability is now available.

Description

This update for pdns fixes the following issue:

- CVE-2018-1046: An issue has been found in the dnsreplay tool provided

with PowerDNS Authoritative, where replaying a specially crafted PCAP

file can trigger a stack-based buffer

overflow, leading to a crash and potentially arbitrary code execution.

This buffer overflow only occurs when the -ecs-stamp

option of dnsreplay is used. (boo#1092540)

Topics%20covered

Topics Covered

security advisory moderate security update buffer overflow patch openSUSE pdns

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.3:

zypper in -t patch openSUSE-2018-491=1

Package List

- openSUSE Leap 42.3 (x86_64):

pdns-4.0.3-12.1

pdns-backend-geoip-4.0.3-12.1

pdns-backend-geoip-debuginfo-4.0.3-12.1

pdns-backend-godbc-4.0.3-12.1

pdns-backend-godbc-debuginfo-4.0.3-12.1

pdns-backend-ldap-4.0.3-12.1

pdns-backend-ldap-debuginfo-4.0.3-12.1

pdns-backend-lua-4.0.3-12.1

pdns-backend-lua-debuginfo-4.0.3-12.1

pdns-backend-mydns-4.0.3-12.1

pdns-backend-mydns-debuginfo-4.0.3-12.1

pdns-backend-mysql-4.0.3-12.1

pdns-backend-mysql-debuginfo-4.0.3-12.1

pdns-backend-postgresql-4.0.3-12.1

pdns-backend-postgresql-debuginfo-4.0.3-12.1

pdns-backend-remote-4.0.3-12.1

pdns-backend-remote-debuginfo-4.0.3-12.1

pdns-backend-sqlite3-4.0.3-12.1

pdns-backend-sqlite3-debuginfo-4.0.3-12.1

pdns-debuginfo-4.0.3-12.1

pdns-debugsource-4.0.3-12.1

References

https://www.suse.com/security/cve/CVE-2018-1046.html

https://bugzilla.suse.com/1092540

--

Announcement ID: openSUSE-SU-2018:1384-1
Rating: moderate
Affected Products: openSUSE Leap 42.3

Topics%20covered

Topics Covered

security advisory moderate security update buffer overflow patch openSUSE pdns

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.