Bug 655318 (CVE-2018-1046)

Summary:	<net-dns/pdns-4.1.2 - dnsreplay: replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution
Product:	Gentoo Security	Reporter:	Jeroen Roovers (RETIRED) <jer>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	swegener
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-02.html
Whiteboard:	B3 [noglsa cve]
Package list:		Runtime testing required:	---

Description Jeroen Roovers (RETIRED) gentoo-dev

2018-05-09 08:47:11 UTC

== PowerDNS Security Advisory 2018-02: Buffer overflow in dnsreplay ==

An issue has been found in the dnsreplay tool provided with PowerDNS Authoritative, where replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the –ecs-stamp option of dnsreplay is used. Regardless of this issue, the use of dnsreplay with untrusted PCAP files is not advised. This issue has been assigned CVE-2018-1046 by Red Hat.

PowerDNS Authoritative from 4.0.0 up to and including 4.1.1 is affected.

We would like to thank Wei Hao for finding and subsequently reporting this issue.

Comment 1 Sven Wegener gentoo-dev

2018-05-12 19:56:44 UTC

I've committed 4.1.2 to the tree. The 4.1.x series has been in the tree for quite some time now, so 4.1.2 should be ready for stabilization.