SB2016091247 - Fedora 23 update for pdns

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2016091247

SB2016091247 - Fedora 23 update for pdns

Published: September 12, 2016 Updated: April 24, 2025

Security Bulletin ID SB2016091247
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Denial of service (CVE-ID: CVE-2016-5426)

The vulnerability allows a remote user to cause excessive resources spending on the target system.
The weakness exists due to sending of specially crafted DNS queries with length of qname value more than 255 bytes that may lead to denial of service.
The vulnerability may result in consuming of excessive resources and denial of service on the vulnerable system.


2) Denial of service (CVE-ID: CVE-2016-5427)

The vulnerability allows a remote user to cause excessive resources spending on the target system.
The weakness exists due to sending of specially crafted DNS queries with label values containing a dot character ('.') that may lead to denial of service.
The vulnerability may result in consuming of excessive resources and denial of service on the vulnerable system.


Remediation

Install update from vendor's website.

References