Bug 1224001 (CVE-2024-25581)

Summary: VUL-0: CVE-2024-25581: dnsdist: Transfer requests received over DoH can lead to a denial of service in DNSdist
Product: [Novell Products] SUSE Security Incidents Reporter: Thomas Leroy <thomas.leroy>
Component: IncidentsAssignee: Security Team bot <security-team>
Status: RESOLVED FIXED QA Contact: Security Team bot <security-team>
Severity: Normal    
Priority: P3 - Medium CC: meissner
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: Other   
URL: https://smash.suse.de/issue/404602/
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Comment 3 Carlos López 2024-05-13 11:01:09 UTC 
Public:
https://www.openwall.com/lists/oss-security/2024/05/13/1
Comment 4 Adam Majer 2024-05-13 16:01:09 UTC 
Fix submitted to Factory. Re-assigning to security team for tracking.
Comment 5 OBSbugzilla Bot 2024-05-13 16:35:02 UTC 
This is an autogenerated message for OBS integration:
This bug (1224001) was mentioned in
https://build.opensuse.org/request/show/1173740 Factory / dnsdist
Comment 6 Gabriele Sonnu 2024-06-10 12:12:11 UTC 
All done, closing.