CVE-2017-15133 Denial of Service in miekg-dns
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| miekg github.com/miekg/dns(Go) | < 1.0.4 | 1.0.4 |
| miekg github.com/miekg/dns(Go) | < 1.0.4-0.20180125103619-43913f2f4fbd | 1.0.4-0.20180125103619-43913f2f4fbd |
| debian/golang-github-miekg-dns(Debian:12) | < 0.0~git20170501.0.f282f80-3 | 0.0~git20170501.0.f282f80-3 |
| debian/golang-github-miekg-dns(Debian:13) | < 0.0~git20170501.0.f282f80-3 | 0.0~git20170501.0.f282f80-3 |
| debian/golang-github-miekg-dns(Debian:14) | < 0.0~git20170501.0.f282f80-3 | 0.0~git20170501.0.f282f80-3 |
| miekg-dns prject miekg-dns | < 1.0.4 | 1.0.4 |
| Miek Gieben miekg-dns | = before 1.0.4 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking third-party-advisory
- github.com patch
- github.com patch
- bugzilla.redhat.com issue-tracking third-party-advisory
- pkg.go.dev
- github.com
- Debian Security Tracker CVE-2017-15133 vendor-advisory
- bugs.debian.org issue-tracking