SUSE-SU-2023:2777-1: dnsdist&distro=SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2023:2777-1 is a vulnerability in dnsdist&distro=SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 04-07-2023
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for dnsdist This update for dnsdist fixes the following issues: - Implements package 'dnsdist' with version 1.8.0 in SLE15. (jsc#PED-3402) - Downstream DNS resolver configuration should be chosen by the admin - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511) - Security fix: There is an issue that can lead to a denial of service on 32-bit if a backend sends crafted answers. (CVE-2016-7069, bsc#1054799) - Security fix: Alteration of dnsdist's ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website. (CVE-2017-7557, bsc#1054799) - SNMP support, exporting statistics and sending traps - Preventing the packet cache from ageing responses when deployed in - Various DNSCrypt-related fixes and improvements, including automatic key rotation

No weakness data has been published for this record.