CVE-2016-7069 Denial of service in dnsdist
A remote attacker can crash the dnsdist service on 32-bit systems by sending crafted EDNS0 responses when EDNS Client Subnet is enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-7069?
CVE-2016-7069 is a medium-severity denial of service vulnerability in Open-Xchange dnsdist, published on 11 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
Weakness: CWE-20
Which versions are affected by CVE-2016-7069?
It affects 1 product.
Products include Powerdns Dnsdist.
How do I fix CVE-2016-7069?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-7069 being exploited?
There is no known exploitation of CVE-2016-7069 in the wild and no public exploit code.
Other vulnerabilities in Open-Xchange dnsdist
Sources
Also known as DEBIAN-CVE-2016-7069, GHSA-v3pf-fvxp-8mjf, UBUNTU-CVE-2016-7069.