A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed
    TCP packets to block the DNS server from accepting new connections. (CVE-2017-15133)

An update of the kapacitor package has been released.

Consul developers report :

A flaw was found in the embedded DNS library used in consul which may allow a denial of service attack. Consul was updated to include the fixed version.

ID	Name	Product	Family	Severity
417291	SCA: security update for github.com/miekg/dns (GHSA-p55x-7x9v-q8m4)	Tenable Cloud Security	SCA Checks	high
417291	SCA: security update for github.com/miekg/dns (GHSA-p55x-7x9v-q8m4)	Tenable Self-Hosted Container Security	SCA Checks	high
204224	Photon OS 5.0: Kapacitor PHSA-2023-5.0-0045	Nessus	PhotonOS Local Security Checks	critical
106857	FreeBSD : consul -- vulnerability in embedded DNS library (ad2eeab6-ca68-4f06-9325-1937b237df60)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2017-15133

high

Tenable Plugins

high

high

critical

high