SUSE-SU-2025:01743-1
SUSE-SU-2025:01743-1 · Security update for dnsdist
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for dnsdist fixes the following issues: Update to version 1.9.10. - CVE-2025-30194: illegal memory access (double-free) when processing specially crafted DoH exchanges leads to a denial-of-service (bsc#1242028). - CVE-2025-30193: stack exhaustion when processing too many queries on incoming TCP connections leads to a denial-of-service (bsc#1243378).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
dnsdist SUSE:Linux Enterprise Module for Basesystem 15 SP7
- Affected ranges
- ECOSYSTEM: < 1.9.10-150700.3.3.1
Update to 1.9.10-150700.3.3.1