Lucene search

K
gentooGentoo FoundationGLSA-200601-16
HistoryJan 30, 2006 - 12:00 a.m.

MyDNS: Denial of service

2006-01-3000:00:00
Gentoo Foundation
security.gentoo.org
8

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.089 Low

EPSS

Percentile

94.6%

Background

MyDNS is a DNS server using a MySQL database as a backend. It is designed to allow for fast updates and small resource usage.

Description

MyDNS contains an unspecified flaw that may allow a remote Denial of Service.

Impact

An attacker could cause a Denial of Service by sending malformed DNS queries to the MyDNS server.

Workaround

There is no known workaround at this time.

Resolution

All MyDNS users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-dns/mydns-1.1.0"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-dns/mydns< 1.1.0UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.089 Low

EPSS

Percentile

94.6%