Toshifumi Sakaguchi discovered that the patch applied to pdns-recursor,
a recursive DNS server, fixing
CVE-2015-1868, was insufficient in some
cases, allowing remote attackers to cause a denial of service
(service-affecting CPU spikes and in some cases a crash).
For the stable distribution (jessie), this problem has been fixed in
version 3.6.2-2+deb8u2.
For the testing distribution (stretch), this problem has been fixed
in version 3.7.3-1.
For the unstable distribution (sid), this problem has been fixed in
version 3.7.3-1.
We recommend that you upgrade your pdns-recursor packages.
CPE | Name | Operator | Version |
---|---|---|---|
pdns-recursor | eq | 3.6.2-2+deb8u2~bpo70+1 | |
pdns-recursor | eq | 3.6.2-2+deb8u1 | |
pdns-recursor | eq | 3.6.2-2 | |
pdns-recursor | eq | 3.6.2-2+deb8u1~bpo70+1 |