pdns: denial of service
| Package(s): | pdns | CVE #(s): | CVE-2016-5426 CVE-2016-5427 | ||||||||||||||||||||||||
| Created: | September 12, 2016 | Updated: | October 3, 2016 | ||||||||||||||||||||||||
| Description: | From the Debian advisory:
CVE-2016-5426 / CVE-2016-5427: Florian Heinz and Martin Kluge reported that the PowerDNS Authoritative Server accepts queries with a qname's length larger than 255 bytes and does not properly handle dot inside labels. A remote, unauthenticated attacker can take advantage of these flaws to cause abnormal load on the PowerDNS backend by sending specially crafted DNS queries, potentially leading to a denial of service. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||