[ GLSA 201202-03 ] MaraDNS: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: MaraDNS: Denial of Service (GLSA 201202-03)
Severity: normal
Exploitable: remote
Date: February 22, 2012
Bug(s): #397431
ID: 201202-03

Synopsis

A hash collision vulnerability in MaraDNS allows remote attackers
to cause a Denial of Service condition.


Background

MaraDNS is a proxy DNS server with permanent caching.

Affected Packages

Package: net-dns/maradns
Vulnerable: < 1.4.09
Unaffected: >= 1.4.09
Architectures: All supported architectures


Description

MaraDNS does not properly randomize hash functions to protect against
hash collision attacks.


Impact

A remote attacker could send many specially crafted DNS recursive
queries, possibly resulting in a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All MaraDNS users should upgrade to the latest version: