CVE catalog

CVE-2016-7069

dnsdist: CVE-2016-7069

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.58% · Oct 25, 2026

An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandnsdistsid2.1.3-1fixed
Debiandnsdistforky2.1.3-1fixed
Debiandnsdisttrixie1.9.16-0+deb13u1fixed
Debiandnsdisttrixie-security1.9.16-0+deb13u1fixed
Debiandnsdistbookworm1.7.3-2fixed
Susednsdistlinux enterprise module for basesystem 15 sp51.8.0-150400.9.3.1fixed
Suseluajitlinux enterprise module for basesystem 15 sp52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Opensusednsdistleap 15.41.8.0-150400.9.3.1fixed
Opensuseluajitleap 15.42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Opensusednsdistleap 15.51.8.0-150400.9.3.1fixed
Opensuseluajitleap 15.52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Susednsdistlinux enterprise module for basesystem 15 sp41.8.0-150400.9.3.1fixed
Suseluajitlinux enterprise module for basesystem 15 sp42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Suseluajitlinux enterprise module for package hub 15 sp42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Suseluajitlinux enterprise module for package hub 15 sp52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Suseluajitlinux enterprise workstation extension 15 sp42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Suseluajitlinux enterprise workstation extension 15 sp52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Opensusednsdistleap 15.41.8.0-150400.9.3.1fixed
Opensuseluajitleap 15.42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Opensusednsdistleap 15.51.8.0-150400.9.3.1fixed
Opensuseluajitleap 15.52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1fixed
Susednsdistlinux enterprise server 15 sp1-ltss1.8.0-150100.3.5.1fixed
Susednsdistlinux enterprise server 15 sp2-ltss1.8.0-150100.3.5.1fixed
Susednsdistlinux enterprise server 15 sp3-ltss1.8.0-150100.3.5.1fixed
Susednsdistlinux enterprise server for sap applications 15 sp11.8.0-150100.3.5.1fixed
Susednsdistlinux enterprise server for sap applications 15 sp21.8.0-150100.3.5.1fixed
Opensusednsdisttumbleweed1.8.0~rc1-1.1fixed
Ubuntudnsdist16.041.0.0~alpha2-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandnsdistsourcesid1.2.0-1lowNot reported[872854]
Debiandnsdistsourceforky1.2.0-1lowNot reported[872854]
Debiandnsdistsourcetrixie1.2.0-1lowNot reported[872854]
Debiandnsdistsourcebookworm1.2.0-1lowNot reported[872854]
Susednsdistrpmlinux enterprise module for basesystem 15 sp51.8.0-150400.9.3.1Not reportedSUSE-SU-2023:2760-2Not reported
Suseluajitrpmlinux enterprise module for basesystem 15 sp52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-2Not reported
Opensusednsdistrpmleap 15.41.8.0-150400.9.3.1Not reportedSUSE-SU-2023:2760-2Not reported
Opensuseluajitrpmleap 15.42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-2Not reported
Opensusednsdistrpmleap 15.51.8.0-150400.9.3.1Not reportedSUSE-SU-2023:2760-2Not reported
Opensuseluajitrpmleap 15.52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-2Not reported
Susednsdistrpmlinux enterprise module for basesystem 15 sp41.8.0-150400.9.3.1Not reportedSUSE-SU-2023:2760-1Not reported
Suseluajitrpmlinux enterprise module for basesystem 15 sp42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-1Not reported
Suseluajitrpmlinux enterprise module for package hub 15 sp42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-1Not reported
Suseluajitrpmlinux enterprise module for package hub 15 sp52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-1Not reported
Suseluajitrpmlinux enterprise workstation extension 15 sp42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-1Not reported
Suseluajitrpmlinux enterprise workstation extension 15 sp52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-1Not reported
Opensusednsdistrpmleap 15.41.8.0-150400.9.3.1Not reportedSUSE-SU-2023:2760-1Not reported
Opensuseluajitrpmleap 15.42.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-1Not reported
Opensusednsdistrpmleap 15.51.8.0-150400.9.3.1Not reportedSUSE-SU-2023:2760-1Not reported
Opensuseluajitrpmleap 15.52.1.0~beta3+git.1624618403.e9577376-150400.4.2.1Not reportedSUSE-SU-2023:2760-1Not reported
Susednsdistrpmlinux enterprise server 15 sp1-ltss1.8.0-150100.3.5.1Not reportedSUSE-SU-2023:2777-1Not reported
Susednsdistrpmlinux enterprise server 15 sp2-ltss1.8.0-150100.3.5.1Not reportedSUSE-SU-2023:2777-1Not reported
Susednsdistrpmlinux enterprise server 15 sp3-ltss1.8.0-150100.3.5.1Not reportedSUSE-SU-2023:2777-1Not reported
Susednsdistrpmlinux enterprise server for sap applications 15 sp11.8.0-150100.3.5.1Not reportedSUSE-SU-2023:2777-1Not reported
Susednsdistrpmlinux enterprise server for sap applications 15 sp21.8.0-150100.3.5.1Not reportedSUSE-SU-2023:2777-1Not reported
Opensusednsdistrpmtumbleweed1.8.0~rc1-1.1Not reportedOPENSUSE-SU-2024:12731-1Not reported

[Debian bug #872854]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [dnsdist]Unknown
    Details (2)

    • 1.7.3-2 · amd64 · bookworm

      Fixed · Fixed: 1.2.0-1

      dsa · dnsdist · debian · bookworm; dsa · dnsdist · debian · 12

    • 1.7.3-2 · arm64 · bookworm

      Fixed · Fixed: 1.2.0-1

      dsa · dnsdist · debian · bookworm; dsa · dnsdist · debian · 12

[Debian 13 (Trixie)]

  • [dnsdist]Unknown
    Details (4)

    • 1.9.15-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.2.0-1

      dsa · dnsdist · debian · 13

    • 1.9.15-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.2.0-1

      dsa · dnsdist · debian · 13

    • 1.9.16-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.2.0-1

      dsa · dnsdist · debian · 13

    • 1.9.16-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.2.0-1

      dsa · dnsdist · debian · 13

[openSUSE Tumbleweed]

  • [dnsdist]Unknown

    Source package: [dnsdist]

    Details (1)

    • 2.0.7-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.8.0~rc1-1.1

      dsa · dnsdist · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]