NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be trigge...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:14 nsd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.3-1"}]}]

参照URL

advisory security-tracker.debian.org