PowerDNS DNSdist 安全漏洞

PowerDNS DNSDist is a load balancer from the Dutch company PowerDNS. The product is capable of diverting traffic to different servers to provide optimal performance for users. A security vulnerability exists in PowerDNS DNSdist versions prior to 1.9.4, which stems from the fact that an attacker c...

CVE-2024-25581

When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IXFR over DNS over HTTPS, causing the process to stop...

CVE-2024-25581

DNSDIST vulnerability CVE-2024-25581: When DNS over HTTPS is enabled (nghttp2 provider) and queries are routed to a tcp-only or DoT backend, an attacker can trigger an assertion failure by requesting a zone transfer (AXFR/IXFR) over DoH, causing the process to crash and a DoS. DoH is not enabled ...

CVE-2024-25581

When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IXFR over DNS over HTTPS, causing the process to stop...

CVE-2024-25581 Transfer requests received over DoH can lead to a denial of service in DNSdist

When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IXFR over DNS over HTTPS, causing the process to stop...

CVE-2024-25581 Transfer requests received over DoH can lead to a denial of service in DNSdist

When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IXFR over DNS over HTTPS, causing the process to stop...

dnsdist -- Transfer requests received over DoH can lead to a denial of service

PowerDNS Security Advisory reports: When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IXFR over DNS over...

openSUSE: Security Advisory for dnsdist (SUSE-SU-2023:2760-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2760-1 Security update for dnsdist

This update for dnsdist fixes the following issues: - update to 1.8.0 - Implements dnsdist in SLE15 jscPED-3402 - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data CVE-2018-14663, bsc1114511 - update to 1.2.0 bsc1054799, bsc1054802 This release also...

SUSE-SU-2023:2760-2 Security update for dnsdist

This update for dnsdist fixes the following issues: - update to 1.8.0 - Implements dnsdist in SLE15 jscPED-3402 - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data CVE-2018-14663, bsc1114511 - update to 1.2.0 bsc1054799, bsc1054802 This release also...

SUSE SLES15 Security Update : dnsdist (SUSE-SU-2023:2777-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2777-1 advisory. - Implements package 'dnsdist' with version 1.8.0 in SLE15. jscPED-3402 - Downstream DNS resolver configuration should be chosen by...

SUSE: Security Advisory (SUSE-SU-2023:2777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2777-1 Security update for dnsdist

This update for dnsdist fixes the following issues: - Implements package 'dnsdist' with version 1.8.0 in SLE15. jscPED-3402 - Downstream DNS resolver configuration should be chosen by the admin - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data...

openSUSE 15: dnsdist / libluajit-5_1-2 / libluajit-5_1-2-32bit / luajit / etc (SUSE-SU-2023:2760-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2760-1 advisory. - update to 1.8.0 - Implements dnsdist in SLE15 jscPED-3402 - Security fix: fixes a possible record smugging with a crafted DNS query with trailing...

SUSE CVE-2018-14663

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...

SUSE CVE-2016-7069

An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to th...

SUSE CVE-2017-7557

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack...

Fedora Update for dnsdist FEDORA-2018-9f375c6c01

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 28 : dnsdist (2018-ef486b9e50)

Security fix for CVE-2018-14663 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 29 : dnsdist (2018-9f375c6c01)

Security fix for CVE-2018-14663 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...