CVE-2017-15133: Denial of Service in miekg-dns
Summary
CVE-2017-15133: Denial of service in github.com/miekg/dns. Affects github.com/miekg/dns versions < 1.0.4-0.20180125103619-43913f2f4fbd. Fixed in 1.0.4-0.20180125103619-43913f2f4fbd. How to fix ↓
Also tracked for
- golang-github-miekg-dns · Debian:11
The same CVE-2017-15133 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The miekg-dns package is a DNS library written in Go. It provides functionality for handling DNS messages, parsing and generating DNS packets, and interacting with DNS servers. The package is widely used in various applications and services that require DNS functionality.
Vulnerability Detail
A denial of service vulnerability has been discovered in miekg-dns before version 1.0.4. This vulnerability allows a remote attacker to launch a denial of service attack by sending carefully timed TCP packets to the DNS server. By exploiting this vulnerability, an attacker can block the DNS server from accepting new connections, leading to a disruption of DNS services. The vulnerability has a CVSS score of 7.5, indicating a high severity.
How To Fix
Latest published version: v1.1.73 as of 23 Oct 2026
go get github.com/miekg/dns@v1.1.73Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.0.4-0.20180125103619-43913f2f4fbd
This is the first release that contains the fix.
go get github.com/miekg/dns@v1.0.4-0.20180125103619-43913f2f4fbdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by upgrading to the patched version of miekg-dns.
Conclusion
The miekg-dns package before version 1.0.4 is vulnerable to a denial of service attack. To mitigate this vulnerability, it is crucial to upgrade to version 1.0.4 or later. There are no known workarounds for this issue. For additional assistance with vulnerability remediation, please reach out to DevNack.com.
See every vulnerability recorded for github.com/miekg/dns →
FAQ
The vulnerability allows a remote attacker to launch a denial of service attack, potentially disrupting DNS services.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply provide your Gopkg.lock file to the playground, and it will analyze and alert you in real-time if the vulnerability is present.
Yes, a fix is available in miekg-dns version 1.0.4. It is recommended to upgrade to this version to mitigate the vulnerability.
No, there are no known workarounds for this vulnerability. The recommended solution is to upgrade to the patched version of miekg-dns.
For further support on vulnerability remediation, you can contact info@devnack.com.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/miekg/dns.
