247 matches found
Null pointer dereference
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
UBUNTU-CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
DEBIAN-CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
CVE-2016-7069
CVE-2016-7069 affects dnsdist up to version 1.2.0, where parsing responses from a backend and removing an EDNS0 OPT record (when EDNS Client Subnet is enabled) could trigger undefined behavior on 32-bit systems, causing a crash. Technical details across connected sources confirm the vulnerability...
CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...
dnsdist Denial of Service Vulnerability
dnsdist is a load balancer that diverts traffic to different servers to provide optimal performance for users. A denial of service vulnerability exists in dnsdist. A remote attacker could exploit this vulnerability to cause a denial of service application crash...
Fedora Update for dnsdist FEDORA-2017-98e8569b33
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for dnsdist FEDORA-2017-487fae29b4
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : dnsdist (2017-98e8569b33)
Update to new upstream release 1.2.0 Security fix for CVE-2016-7069 and CVE-2017-7557 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 26 : dnsdist (2017-487fae29b4)
Update to new upstream release 1.2.0 Security fix for CVE-2016-7069 and CVE-2017-7557 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
[SECURITY] Fedora 26 Update: dnsdist-1.2.0-1.fc26
dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in li fe is to route traffic to the best server, delivering top performance to legitimate users while shunting or blocking abusive traffic...
PowerDNS dnsdist Authentication Bypass Vulnerability
dnsdist is a load balancer that diverts traffic to different servers to provide optimal performance for users. A security vulnerability exists in the REST API authentication mechanism in dnsdist version 1.1.0. An attacker can exploit the vulnerability to bypass access restrictions with the help o...
FreeBSD : dnsdist -- multiple vulnerabilities (198d82f3-8777-11e7-950a-e8e0b747a45a)
PowerDNS Security Advisory reports : The first issue can lead to a denial of service on 32-bit if a backend sends crafted answers, and the second to an alteration of dnsdist's ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website. %NASLMINLEVEL...
CVE-2017-7557
dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack...