SB2019080216 - Resource exhaustion in pdns (Alpine package)
Published: August 2, 2019
Security Bulletin ID
SB2019080216
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource exhaustion (CVE-ID: CVE-2019-10203)
The vulnerability allows a remote authenticated user to perform service disruption.
PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.
Remediation
Install update from vendor's website.
References
- https://git.alpinelinux.org/aports/commit/?id=9e8380b6496455e04d4c1bd2aac11e321420fef0
- https://git.alpinelinux.org/aports/commit/?id=1f381cb542666fcbfe1c0996837f7482785dc8f0
- https://git.alpinelinux.org/aports/commit/?id=1fc4c6a100506ca9ff9267f89aece8d93f4771f7
- https://git.alpinelinux.org/aports/commit/?id=d6336af0a3286c8c01568fa8b645c482f4d06d7e