Lucene search

K
mageiaGentoo FoundationMGASA-2014-0522
HistoryDec 10, 2014 - 11:09 p.m.

Updated pdns-recursor packages fix CVE-2014-8601

2014-12-1023:09:57
Gentoo Foundation
advisories.mageia.org
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.123 Low

EPSS

Percentile

95.3%

Updated pdns-recursor package fixes security vulnerability: PowerDNS Recursor before version 3.6.2, could be negatively impacted by specially configured, hard to resolve domain names. A remote attacker, by sending a query for such a domain name, could cause severe performance degradation in PowerDNS Recursor, causing a denial of service (CVE-2014-8601). The pdns-recursor package has been updated to version 3.6.2, fixing this issue and several other bugs, as well as providing additional features.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchpdns-recursor< 3.6.2-1.1pdns-recursor-3.6.2-1.1.mga4

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.123 Low

EPSS

Percentile

95.3%