Security Update for pdns-recursor
Summary
DSA-3096-1: pdns-recursor - security update. Affects pdns-recursor versions < 3.3-3+deb7u1. Fixed in 3.3-3+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
pdns-recursor is a recursive DNS server that provides DNS resolution services. It is commonly used to resolve domain names and provide DNS caching. The pdns-recursor package is vulnerable to a flaw that allows a remote attacker to affect its performance, leading to resource exhaustion and potential denial-of-service. This vulnerability can be exploited by controlling maliciously-constructed zones or a rogue server.
Vulnerability Detail
The vulnerability in pdns-recursor allows an attacker to exploit the server's recursive DNS functionality. By sending specially crafted DNS queries or controlling malicious zones, the attacker can cause the pdns-recursor server to consume excessive resources, leading to a potential denial-of-service condition. This can impact the availability and performance of the DNS resolution service provided by pdns-recursor.
How To Fix
Minimum fixed version
3.3-3+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade pdns-recursorTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update to the pdns-recursor package to mitigate the risk of exploitation.
Conclusion
The pdns-recursor package is vulnerable to a denial-of-service attack due to a flaw in its recursive DNS functionality. To mitigate this vulnerability, it is crucial to upgrade the package to the recommended version. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for pdns-recursor →
FAQ
pdns-recursor is a recursive DNS server that provides DNS resolution services.
The vulnerability allows a remote attacker to affect the performance of pdns-recursor, potentially leading to resource exhaustion and denial-of-service.
To fix this vulnerability, you should upgrade the pdns-recursor package to the recommended version for your distribution.
There is no known workaround for this vulnerability. Applying the security update is the recommended solution.
You can obtain the updated pdns-recursor package from the official Debian repositories.
Related vulnerabilities
Recent vulnerabilities recorded for pdns-recursor.
