The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dnsdist | Jul 30, 2024 | Sep 11, 2018 |
| Freebsd | — | Upgrade dnsdist | Aug 23, 2017 | Aug 22, 2017 |
| Suse | — | Upgrade luajit-develUpgrade luajitUpgrade libluajit-5_1-2Upgrade dnsdistUpgrade libluajit-5_1-2-32bit | Aug 9, 2024 | Sep 11, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 11, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub