pdns-recursor - Denial of Service Vulnerability
Summary
DLA-788-1: pdns-recursor - security update. Affects pdns-recursor versions < 3.3-3+deb7u2. Fixed in 3.3-3+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
pdns-recursor is a recursive DNS server that is responsible for resolving domain names into IP addresses. It is commonly used to provide DNS resolution services for local networks. The pdns-recursor package in Debian 7 Wheezy is affected by a denial of service vulnerability. This vulnerability allows a remote, unauthenticated attacker to cause an abnormal CPU usage load on the pdns server, potentially leading to a partial denial of service if the system becomes overloaded.
Vulnerability Detail
The pdns-recursor vulnerability arises from the server parsing all records present in a query, regardless of their necessity or legitimacy. This behavior enables an attacker to craft malicious queries that cause the server to consume excessive CPU resources. By overwhelming the server with such queries, an attacker can degrade its performance and potentially disrupt DNS resolution services for legitimate users.
How To Fix
Minimum fixed version
3.3-3+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade pdns-recursorTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided security update to ensure the integrity and availability of the pdns-recursor service.
Conclusion
The pdns-recursor package in Debian 7 Wheezy is vulnerable to a denial of service attack. To protect your system, it is crucial to upgrade to the latest version of the package. For further assistance or support in resolving this vulnerability, please contact DevNack.com.
See every vulnerability recorded for pdns-recursor →
FAQ
pdns-recursor is a recursive DNS server that resolves domain names into IP addresses.
The vulnerability allows an attacker to cause a partial denial of service by overwhelming the pdns-recursor server with malicious queries.
Users of pdns-recursor version 3.3 and earlier on Debian 7 Wheezy are affected by this vulnerability.
No, the vulnerability can be exploited remotely without authentication.
The recommended mitigation is to upgrade to pdns-recursor version 3.3-3+deb7u2 or later.
Related vulnerabilities
Recent vulnerabilities recorded for pdns-recursor.
