Arch Linux alert ASA-201805-1 (powerdns)

From:
    	     
 
Jelle van der Waa <jelle@archlinux.org> 
To:
    	     
 
arch-security@archlinux.org 
Subject:
    	     
 
[ASA-201805-1] powerdns: arbitrary code execution 
Date:
    	     
 
Wed, 9 May 2018 21:05:35 +0200
Message-ID:
    	     
 
<20180509190534.ax4oud2prjefp74h@mail.archlinux.org>
Arch Linux Security Advisory ASA-201805-1
=========================================

Severity: High
Date    : 2018-05-09
CVE-ID  : CVE-2018-1046
Package : powerdns
Type    : arbitrary code execution
Remote  : No
Link    : https://security.archlinux.org/AVG-686

Summary
=======

The package powerdns before version 4.1.2-1 is vulnerable to arbitrary
code execution.

Resolution
==========

Upgrade to 4.1.2-1.

# pacman -Syu "powerdns>=4.1.2-1"

The problem has been fixed upstream in version 4.1.2.

Workaround
==========

None.

Description
===========

An issue has been found in the dnsreplay tool provided with PowerDNS
Authoritative, where replaying a specially crafted PCAP file can
trigger a stack based buffer overflow, leading to a crash and
potentially arbitrary code execution. This buffer overflow only occurs
when the --ecs-stamp option of dnsreplay is used. Regardless of this
issue, the use of dnsreplay with untrusted PCAP files is not advised.

Impact
======

A local attacker is be able to cause a denial of service or execute
arbitrary code via a specially crafted PCAP file.

References
==========

https://marc.info/?l=oss-security&m=152585376901543
https://github.com/PowerDNS/pdns/commit/f9c57c98da1b1007a...
https://doc.powerdns.com/authoritative/security-advisorie...
https://security.archlinux.org/CVE-2018-1046