[ glsa 202101-38 ] nsd

[GLSA]

Gentoo Linux Security Advisory

Title: NSD: Symbolic link traversal (GLSA 202101-38)
Severity: normal
Exploitable: local
Date: 2021-01-29
Bug(s): #758977
ID: 202101-38

Synopsis

A vulnerability was discovered in NSD which could allow a local
attacker to cause a Denial of Service condition.


Background

An authoritative only, high performance, open source name server

Affected Packages

Package: net-dns/nsd
Vulnerable: < 4.3.4
Unaffected: >= 4.3.4
Architectures: All supported architectures


Description

A local vulnerability was discovered that would allow for a local
symlink attack due to how NSD handles PID files.


Impact

A local attacker could cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All NSD users should upgrade to the latest version: