REDHAT-BUG-1066609: Medium severity MaraDNS Deadwood vulnerability
It was reported [1],[2] that MaraDNS's recursive resolver, Deadwood, suffers from a flaw where string bounds checking was not done correctly under certain circumstances. As a result, it was possible for a remote attacker to send Deadwood a "packet of death", which would cause Deadwood to crash. Upstream notes that it currently appears that this attack can only be exploited by an IP address with a permission to perform recursive queries against Deadwood.
It looks like these are the appropriate patches in git:
https://github.com/samboy/MaraDNS/commit/f015495d221f1c2b2f10db38e87cecf3839d6093 https://github.com/samboy/MaraDNS/commit/2cfcd2397cb8168d4aa4594839fabe88420d03c3
[1] http://samiam.org/blog/2014-02-12.html [2] http://secunia.com/advisories/57033/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1066609?
The severity of REDHAT-BUG-1066609 is high due to its potential to crash the Deadwood resolver.
How do I fix REDHAT-BUG-1066609?
To fix REDHAT-BUG-1066609, update MaraDNS Deadwood to the latest patched version that addresses the vulnerability.
Who is affected by REDHAT-BUG-1066609?
MaraDNS Deadwood users running versions prior to the patch are affected by REDHAT-BUG-1066609.
What type of attack is possible with REDHAT-BUG-1066609?
REDHAT-BUG-1066609 allows for a remote denial-of-service attack due to improper string bounds checking.
What is the impact of REDHAT-BUG-1066609?
The impact of REDHAT-BUG-1066609 is that it can cause the Deadwood resolver to crash, disrupting DNS services.