• info
• discussion
• exploit
• solution
• references

PowerDNS Malformed Query Handling Weakness

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian pdns-backend-geo_2.9.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_amd64.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_amd64.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_amd64.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_amd64.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_amd64.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_amd64.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_amd64.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 ia-32

• Debian pdns-backend-geo_2.9.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_i386.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_i386.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_i386.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_i386.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_i386.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_i386.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_i386.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_i386.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 arm

• Debian pdns-backend-geo_2.9.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_arm.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_arm.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_arm.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_arm.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_arm.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_arm.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_arm.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_arm.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 hppa

• Debian pdns-backend-geo_2.9.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_hppa.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_hppa.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_hppa.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_hppa.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_hppa.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_hppa.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_hppa.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 sparc

• Debian pdns-backend-geo_2.9.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_sparc.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_sparc.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_sparc.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_sparc.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_sparc.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_sparc.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_sparc.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 s/390

• Debian pdns-backend-geo_2.9.20-8+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_s390.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_s390.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_s390.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_s390.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_s390.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_s390.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_s390.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_s390.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 powerpc

• Debian pdns-backend-geo_2.9.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_powerpc.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_powerpc.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_powerpc.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_powerpc.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_powerpc.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_powerpc.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_powerpc.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 alpha

• Debian pdns-backend-geo_2.9.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_alpha.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_alpha.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_alpha.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_alpha.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_alpha.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_alpha.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_alpha.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 m68k

• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0

• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 mipsel

• Debian pdns-backend-geo_2.9.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_mipsel.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_mipsel.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_mipsel.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_mipsel.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_mipsel.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_mipsel.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_mipsel.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 ia-64

• Debian pdns-backend-geo_2.9.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_ia64.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_ia64.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_ia64.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_ia64.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_ia64.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_ia64.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_ia64.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb

Debian Linux 4.0 mips

• Debian pdns-backend-geo_2.9.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.20-8+etch1_mips.deb


• Debian pdns-backend-ldap_2.9.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.20-8+etch1_mips.deb


• Debian pdns-backend-mysql_2.9.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.20-8+etch1_mips.deb


• Debian pdns-backend-pgsql_2.9.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.20-8+etch1_mips.deb


• Debian pdns-backend-pipe_2.9.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.20-8+etch1_mips.deb


• Debian pdns-backend-sqlite_2.9.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.20-8+etch1_mips.deb


• Debian pdns-doc_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.20-8+ etch1_all.deb


• Debian pdns-server_2.9.20-8+etch1_mips.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.20 -8+etch1_mips.deb


• Debian pdns_2.9.20-8+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.20-8+etch 1_all.deb