13

GLSA 201202-04 (Normal): pdns

view full story
linux-howto

http://security.gentoo.org – PowerDNS: Denial of Service (Security)

colm's picture
Submitted by colm on 02/25/2012 – Made popular on 02/25/2012

Stories similar to GLSA 201202-04 (Normal): pdns

Asterisk: Denial of Service

MaraDNS: Denial of Service

Hi,

I'm installing a DHCPD Server with the packages from a distro SLES11 SP1 (dhcp-server-3.1.1-7.12).

And a DNS Server with PowerDNS:

pdns-recursor-3.3-1 pdns-static-3.0-1

The DHCP update de DNS Server, but PowerDNS is not RFC 2135 compliant, and I have to update the MySQL register from PowerDNS with a script, when the leased is changed.

This event is reached with the DHCP event managed in..

GLSA 201001-01 (Normal): ntp 3 years 20 weeks ago

NTP: Denial of Service

GLSA 200907-05 (Normal): git 3 years 44 weeks ago

git: git-daemon Denial of Service

ModSecurity: Denial of Service

This problem from what i can tell is isolated to PowerDNS. The servers are running two packages pdns-static-3.0.1-1.i386.rpm and pdns-recursor-3.3-1.i386.rpm on the most recent version of Amazon Linux.

The amazon ec2 loadbalancers are assigned a CNAME with multiple hosts. Below is an example of the actual behavior.

ejabberd: Multiple Denial of Service vulnerabilities

GLSA 200908-08 (Normal): dhcp 3 years 39 weeks ago

ISC DHCP: dhcpd Denial of Service