PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname.

- Update to 3.4.10

  - CVE-2016-5426, CVE-2016-5427

Security advisory:
https://docs.powerdns.com/md/security/powerdns-advisory-2016-01/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for pdns fixes the following issues :

  - CVE-2016-5426, CVE-2016-5427: Fix case where crafted     queries can cause unexpected backend load. (boo#998159)

Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems :

CVE-2016-5426 / CVE-2016-5427

Florian Heinz and Martin Kluge reported that the PowerDNS Authoritative Server accepts queries with a qname's length larger than 255 bytes and does not properly handle dot inside labels. A remote, unauthenticated attacker can take advantage of these flaws to cause abnormal load on the PowerDNS backend by sending specially crafted DNS queries, potentially leading to a denial of service.

CVE-2016-6172

It was reported that a malicious primary DNS server can crash a secondary PowerDNS server due to improper restriction of zone size limits. This update adds a feature to limit AXFR sizes in response to this flaw.

For Debian 7 'Wheezy', these problems have been fixed in version 3.1-4.1+deb7u2.

We recommend that you upgrade your pdns packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2016-5426 / CVE-2016-5427     Florian Heinz and Martin Kluge reported that the     PowerDNS Authoritative Server accepts queries with a     qname's length larger than 255 bytes and does not     properly handle dot inside labels. A remote,     unauthenticated attacker can take advantage of these     flaws to cause abnormal load on the PowerDNS backend by     sending specially crafted DNS queries, potentially     leading to a denial of service.

  - CVE-2016-6172     It was reported that a malicious primary DNS server can     crash a secondary PowerDNS server due to improper     restriction of zone size limits. This update adds a     feature to limit AXFR sizes in response to this flaw.

ID	Name	Product	Family	Severity
93890	Fedora 23 : pdns (2016-efffcc7aec)	Nessus	Fedora Local Security Checks	high
93699	openSUSE Security Update : pdns (openSUSE-2016-1103)	Nessus	SuSE Local Security Checks	high
93567	Debian DLA-627-1 : pdns security update	Nessus	Debian Local Security Checks	high
93419	Debian DSA-3664-1 : pdns - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-5426

high

Tenable Plugins

high

high

high

high