Lucene search

K
osvGoogleOSV:DSA-2515-1
HistoryJul 19, 2012 - 12:00 a.m.

nsd3 - null pointer dereference

2012-07-1900:00:00
Google
osv.dev
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

Marek VavruĹĄa and Lubos Slovak discovered that NSD, an authoritative
domain name server, is not properly handling non-standard DNS packets.
This can result in a NULL pointer dereference and crash the handling
process. A remote attacker can abuse this flaw to perform denial of
service attacks.

For the stable distribution (squeeze), this problem has been fixed in
version 3.2.5-1.squeeze2.

For the testing distribution (wheezy), this problem will be fixed soon.

For the unstable distribution (sid), this problem has been fixed in
version 3.2.12-1.

We recommend that you upgrade your nsd3 packages.

CPENameOperatorVersion
nsd3eq3.2.5-1
nsd3eq3.2.5-1.squeeze1

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P