[SECURITY] [DSA 4001-1] yadifa security update

2017-10-1908:31:52

lists.debian.org

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.004

Percentile

72.9%

JSON

Debian Security Advisory DSA-4001-1 [email protected]
https://www.debian.org/security/ Sebastien Delafond
October 19, 2017 https://www.debian.org/security/faq

Package : yadifa
CVE ID : CVE-2017-14339
Debian Bug : 876315

It was discovered that YADIFA, an authoritative DNS server, did not
sufficiently check its input. This allowed a remote attacker to cause
a denial-of-service by forcing the daemon to enter an infinite loop.

For the stable distribution (stretch), this problem has been fixed in
version 2.2.3-1+deb9u1.

We recommend that you upgrade your yadifa packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9amd64yadifa< 2.2.3-1+deb9u1yadifa_2.2.3-1+deb9u1_amd64.deb
Debian9mips64ellibyadifa-dev< 2.2.3-1+deb9u1libyadifa-dev_2.2.3-1+deb9u1_mips64el.deb
Debian9armelyadifa< 2.2.3-1+deb9u1yadifa_2.2.3-1+deb9u1_armel.deb
Debian9s390xlibyadifa-dev< 2.2.3-1+deb9u1libyadifa-dev_2.2.3-1+deb9u1_s390x.deb
Debian9i386yadifa< 2.2.3-1+deb9u1yadifa_2.2.3-1+deb9u1_i386.deb
Debian9mipsyadifa-dbgsym< 2.2.3-1+deb9u1yadifa-dbgsym_2.2.3-1+deb9u1_mips.deb
Debian9arm64yadifa< 2.2.3-1+deb9u1yadifa_2.2.3-1+deb9u1_arm64.deb
Debian9mipselyadifa-dbgsym< 2.2.3-1+deb9u1yadifa-dbgsym_2.2.3-1+deb9u1_mipsel.deb
Debian9amd64libyadifa-dev< 2.2.3-1+deb9u1libyadifa-dev_2.2.3-1+deb9u1_amd64.deb
Debian9mips64elyadifa< 2.2.3-1+deb9u1yadifa_2.2.3-1+deb9u1_mips64el.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	amd64	yadifa	< 2.2.3-1+deb9u1	yadifa_2.2.3-1+deb9u1_amd64.deb
Debian	9	mips64el	libyadifa-dev	< 2.2.3-1+deb9u1	libyadifa-dev_2.2.3-1+deb9u1_mips64el.deb
Debian	9	armel	yadifa	< 2.2.3-1+deb9u1	yadifa_2.2.3-1+deb9u1_armel.deb
Debian	9	s390x	libyadifa-dev	< 2.2.3-1+deb9u1	libyadifa-dev_2.2.3-1+deb9u1_s390x.deb
Debian	9	i386	yadifa	< 2.2.3-1+deb9u1	yadifa_2.2.3-1+deb9u1_i386.deb
Debian	9	mips	yadifa-dbgsym	< 2.2.3-1+deb9u1	yadifa-dbgsym_2.2.3-1+deb9u1_mips.deb
Debian	9	arm64	yadifa	< 2.2.3-1+deb9u1	yadifa_2.2.3-1+deb9u1_arm64.deb
Debian	9	mipsel	yadifa-dbgsym	< 2.2.3-1+deb9u1	yadifa-dbgsym_2.2.3-1+deb9u1_mipsel.deb
Debian	9	amd64	libyadifa-dev	< 2.2.3-1+deb9u1	libyadifa-dev_2.2.3-1+deb9u1_amd64.deb
Debian	9	mips64el	yadifa	< 2.2.3-1+deb9u1	yadifa_2.2.3-1+deb9u1_mips64el.deb