Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
89
security advisorycriticalFedoraFedora 32: FEDORA-2020-bf68101ad3 Critical Vulnerability in Knot Resolver
- fixes CVE-2020-12667. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-bf68101ad3 2020-05-28 04:13:58.091808 --------------------------------------------------------------------------------Name : knot-resolver Product : Fedora 32 Version : 5.1.1 Release : 1.fc32 URL : https://www.knot-resolver.cz/ Summary : Caching full DNS Resolver Description : The Knot Resolver is a DNSSEC-enabled caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, start a single kresd instance: $ systemctl start
May 28, 2020
•Critical
Fedora
87
security advisorydenial of servicedebianDebian: DSA-4694-1 Critical Unbound Update for Denial of Service
Two vulnerabiliites have been discovered in Unbound, a recursive-only caching DNS server; a traffic amplification attack against third party authoritative name servers (NXNSAttack) and insufficient sanitisation of replies from upstream servers could result in denial of service via . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4694-1
May 26, 2020
•Critical
Debian
203
security advisoryDNS flawtraffic amplificationMageia 7 - MGASA-2020-0223 Moderate: PowerDNS Traffic Amplification
Updated pdns-recursor packages fix security vulnerabilities: An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted reply by an authoritative name server . MGASA-2020-0223 - Updated pdns-recursor packages fix security vulnerabilities Publication date: 24 May 2020 URL: https://advisories.mageia.org/MGASA-2020-0223.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-10995, CVE-2020-12244 Updated pdns-recursor packages fix security vulnerabilities: An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted reply by an authoritative name server to amplify the resulting traffic between the recursive and other authoritative name servers. Both types of service can suffer degraded performance as an effect (CVE-2020-10995). An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer. This would allow an attacker in position of man-in-the-middle to send a NXDOMAIN answer for a name that does exist, bypassing DNSSEC validation (CVE-2020-12244). References: - https://bugs.mageia.org/show_bug.cgi?id=26645 - https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-01.html - https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-02.html - https://www.openwall.com/lists/oss-security/2020/05/19/3 - https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16 - https://www.cve.org/CVERecord?id=CVE-2020-10995 - https://www.cve.org/CVERecord?id=CVE-2020-12244 SRPMS: - 7/core/pdns-recursor-4.1.16-1.mga7 . Revised pdns-recursor distributions resolve severe DNS protocol vulnerabilities in Mageia, while also improving efficiency concerns.. pdns-recursor security, Mageia advisory, DNSvulnerabilities. . Severity: Important. LinuxSecurity.com Team
May 24, 2020
•Important
Mageia
87
security advisorydebianpdns-recursorDebian: DSA-4691-1 Critical Update for PDNS Recursor Security Flaws
Two vulnerabiliites have been discovered in PDNS Recursor, a resolving name server; a traffic amplification attack against third party authoritative name servers (NXNSAttack) and insufficient validation of NXDOMAIN responses lacking an SOA. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4691-1
May 21, 2020
•Critical
Debian
200
security advisorydenial of servicelibreswanScientific Linux: 2016:2603-2 Moderate: Libreswan Traffic Amplification Fix
Moderate: libreswan security and bug fix update. Date: Wed, 14 Dec 2016 17:58:38 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Scott Reid Subject: Security ERRATA Moderate: libreswan on SL7.x x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Moderate: libreswan security and bug fix update Advisory ID: SLSA-2016:2603-2 Issue Date: 2016-11-03 CVE Numbers: CVE-2016-5361 -- Security Fix(es): * A traffic amplification flaw was found in the Internet Key Exchange version 1 (IKEv1) protocol. A remote attacker could use a libreswan server with IKEv1 enabled in a network traffic amplification denial of service attack against other hosts on the network by sending UDP packets with a spoofed source address to that server. (CVE-2016-5361) Additional Changes: -- SL7 x86_64 libreswan-3.15-8.el7.x86_64.rpm libreswan-debuginfo-3.15-8.el7.x86_64.rpm - Scientific Linux Development Team . The latest libreswan patch in the SL7.x environment effectively addresses a moderate vulnerability, reducing the risk of traffic amplification attacks on network integrity. Libreswan Security Update, Scientific Linux Advisories, Traffic Amplification Attack. . LinuxSecurity.com Team
Dec 14, 2016
Scientific Linux
91
security advisorynetwork securitygentooGentoo: GLSA-201401-08 Normal: NTP Traffic Amplification DoS
NTP can be abused to amplify Denial of Service attack traffic.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201401-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: NTP: Traffic amplification Date: January 16, 2014 Bugs: #496776 ID: 201401-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= NTP can be abused to amplify Denial of Service attack traffic. Background ========= NTP is a protocol designed to synchronize the clocks of computers over a network. The net-misc/ntp package contains the official reference implementation by the NTP Project. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/ntp < 4.2.6_p5-r10 > = 4.2.6_p5-r10 Description ========== ntpd is susceptible to a reflected Denial of Service attack. Please review the CVE identifiers and references below for details. Impact ===== An unauthenticated remote attacker may conduct a distributed reflective Denial of Service attack on another user via a vulnerable NTP server. Workaround ========= We modified the default ntp configuration in =net-misc/ntp-4.2.6_p5-r10 and added "noquery" to the default restriction which disallows anyone to query the ntpd status, including "monlist". If you use a non-default configuration, and provide a ntp service to untrusted networks, we highly recommend you to revise your configuration to disable mode 6 and 7 queries for any untrusted (public) network. You can always enable thesequeries for specific trusted networks. For more details please see the "Access Control Support" chapter in the ntp.conf(5) man page. Resolution ========= All NTP users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/ntp-4.2.6_p5-r10" Note that the updated package contains a modified default configuration only. You may need to modify your configuration further. References ========= [ 1 ] CVE-2013-5211 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5211 [ 2 ] VU#348126 http://www.kb.cert.org/vuls/id/348126 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201401-08 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jan 17, 2014
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!