sthen c46fd8cbc9 update to powerdns-4.1.2, fixing (low risk) CVE-2018-1046 in the
dnsreplay tool:

"The issue is a stack-based buffer overflow occurring when replaying a
specially crafted PCAP file with the `--ecs-stamp` option enabled,
leading to a denial of service or potentially arbitrary code execution.
Regardless of this issue, we do not advise the use of dnsreplay with
untrusted PCAP files."

https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-02.html
2018-05-09 09:39:05 +00:00
..