OPENSUSE-SU-2018:4177-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 18 Dec 2018, 12:04
Last modified:04 Feb 2026, 04:15
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
18 Dec 2018, 12:04
Published
Vulnerability first disclosed
04 Feb 2026, 04:15
Last Modified
Vulnerability information updated
Description
Security update for pdns-recursor This update for pdns-recursor fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157). - CVE-2018-14644: Fixed denial of service via crafted query for meta-types (bsc#1114170). - CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169). - CVE-2018-16855: Fixed case where a crafted query could cause a denial of service (bsc#1116592) This update was imported from the openSUSE:Leap:15.0:Update update project.
Affected Systems
- suse•pdns-recursor&distro=SUSE Package Hub 15
< 4.1.2-bp150.2.3.1
References (9)
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY/#M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY
- https://bugzilla.suse.com/1114157
- https://bugzilla.suse.com/1114169
- https://bugzilla.suse.com/1114170
- https://bugzilla.suse.com/1116592
- https://www.suse.com/security/cve/CVE-2018-10851
- https://www.suse.com/security/cve/CVE-2018-14626
- https://www.suse.com/security/cve/CVE-2018-14644
- https://www.suse.com/security/cve/CVE-2018-16855