MGASA-2017-0036

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2017-0036.html
Import Source
https://advisories.mageia.org/MGASA-2017-0036.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2017-0036
Related
Published
2017-02-02T19:17:14Z
Modified
2017-02-02T12:48:34Z
Summary
Updated pdns-recursor packages fix security vulnerability
Details

Florian Heinz and Martin Kluge reported that pdns-recursor parses all records present in a query regardless of whether they are needed or even legitimate, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the pdns server, resulting in a partial denial of service if the system becomes overloaded (CVE-2016-7068).

References
Credits

Affected packages

Mageia:5 / pdns-recursor

Package

Name
pdns-recursor
Purl
pkg:rpm/mageia/pdns-recursor?distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.4-1.1.mga5

Ecosystem specific 

{
    "section": "core"
}