Toshifumi Sakaguchi discovered that the patch applied to pdns, an
authoritative DNS server, fixing
CVE-2015-1868, was insufficient in
some cases, allowing remote attackers to cause a denial of service
(service-affecting CPU spikes and in some cases a crash).
For the stable distribution (jessie), this problem has been fixed in
version 3.4.1-4+deb8u2.
For the testing distribution (stretch), this problem has been fixed
in version 3.4.5-1.
For the unstable distribution (sid), this problem has been fixed in
version 3.4.5-1.
We recommend that you upgrade your pdns packages.
CPE | Name | Operator | Version |
---|---|---|---|
pdns | eq | 3.4.1-4 | |
pdns | eq | 3.4.1-4+deb8u1~bpo70+1 | |
pdns | eq | 3.4.1-4+deb8u1 |