MyDNS: Denial of Service

1. Gentoo Linux Security Advisory

Package	Vulnerable versions	Unaffected versions	Architecture(s)
net-dns/mydns	< 1.1.0	>= 1.1.0	All supported architectures

Related bugreports: #119548

MyDNS contains a vulnerability that may lead to a Denial of Service attack.

2. Impact Information

MyDNS is a DNS server using a MySQL database as a backend. It is designed to allow for fast updates and small resource usage.

MyDNS contains an unspecified flaw that may allow a remote Denial of Service.

An attacker could cause a Denial of Service by sending malformed DNS queries to the MyDNS server.

3. Resolution Information

There is no known workaround at this time.

All MyDNS users should upgrade to the latest version:

Code Listing 3.1: Resolution

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-dns/mydns-1.1.0"

4. References

Page updated January 30, 2006

Summary: This is a Gentoo Linux Security Advisory

Security Team
Contact Address

Donate to support our development efforts.