Lucene search

K
mageiaGentoo FoundationMGASA-2015-0189
HistoryMay 05, 2015 - 4:36 p.m.

Updated pdns & pdns-recursor packages fix CVE-2015-1868

2015-05-0516:36:50
Gentoo Foundation
advisories.mageia.org
6

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.045 Low

EPSS

Percentile

92.5%

Updated pdns and pdns-recursor packages fix security vulnerability: A bug was discovered in the label decompression code in PowerDNS and PowerDNS Recursor, making it possible for names to refer to themselves, thus causing a loop during decompression. On some platforms, this bug can be abused to cause crashes. On all platforms, this bug can be abused to cause service-affecting CPU spikes (CVE-2015-1868). The pdns package has been updated to version 3.3.2 and the pdns-recursor package has been updated to version 3.6.3 to fix this issue and other bugs.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchpdns< 3.3.2-1pdns-3.3.2-1.mga4
Mageia4noarchpdns-recursor< 3.6.3-1pdns-recursor-3.6.3-1.mga4

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.045 Low

EPSS

Percentile

92.5%