Vulnerability Bulletins |
DSA-3097 unbound - security update |
|
| Affected software | Debian |
|
Florian Maury from ANSSI discovered that unbound, a validating,recursive, and caching DNS resolver, was prone to a denial of servicevulnerability. An attacker crafting a malicious zone and able to emit(or make emit) queries to the server can trick the resolver intofollowing an endless series of delegations, leading to resourceexhaustion and huge network usage. More info: https://www.debian.org/security/2014/dsa-3097 |
|