| Package | Affected versions | Patched versions |
|---|---|---|
| authoritative | ≥ 4.9.0, < 4.9.14≥ 5.0.0, < 5.0.4 | 4.9.145.0.4 |
| dnsdist | ≥ 1.9.0, < 1.9.13≥ 2.0.0, < 2.0.4 | 1.9.132.0.4 |
| recursor | = 5.4.0≥ 5.2.0, < 5.2.9≥ 5.3.0, < 5.3.6 | 5.2.95.3.6 |
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free