An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.

This update for pdns-recursor fixes the following issues :

Security issues fixed :

  - CVE-2018-10851: Fixed denial of service via crafted zone     record or crafted answer (bsc#1114157).

  - CVE-2018-14644: Fixed denial of service via crafted     query for meta-types (bsc#1114170).

  - CVE-2018-14626: Fixed packet cache pollution via crafted     query (bsc#1114169).

  - CVE-2018-16855: Fixed case where a crafted query could     cause a denial of service (bsc#1116592)

Fixes CVE-2018-16855 (Crafted query can cause a denial of service)

----

New upstream release with security fixes for CVE-2018-10851, CVE-2018-14626 and CVE-2018-14644

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

powerdns Team reports :

CVE-2018-16855: An issue has been found in PowerDNS Recursor where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash. When the PowerDNS Recursor is run inside a supervisor like supervisord or systemd, a crash will lead to an automatic restart, limiting the impact to a somewhat degraded service.

ID	Name	Product	Family	Severity
123405	openSUSE Security Update : pdns-recursor (openSUSE-2019-988)	Nessus	SuSE Local Security Checks	high
120858	Fedora 29 : pdns-recursor (2018-e14840a7f5)	Nessus	Fedora Local Security Checks	high
120764	Fedora 28 : pdns-recursor (2018-c341b70641)	Nessus	Fedora Local Security Checks	high
119738	openSUSE Security Update : pdns-recursor (openSUSE-2018-1565)	Nessus	SuSE Local Security Checks	high
119512	FreeBSD : powerdns-recursor -- Crafted query can cause a denial of service (f6d6308a-f2ec-11e8-b005-6805ca2fa271)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2018-16855

high

Tenable Plugins

high

high

high

high

high