Ubuntu
designate package

  1. Bug #1471161
  2. Comment #5

Comment 5 for bug 1471161

Revision history for this message
Graham Hayes (grahamhayes) wrote : Re: Lack of record set size checking leads to denial of service

I think there is 2 parts to this bug:

1: Quotas were being bypassed as part of the v1 API.
2. If there was enough RRs in a RRSet MiniDNS went into a loop.
3. MiniDNS does not have a timeout.

1 is not really relevant - 2 should not happen in anycase.

The patch fixes 2, but not 3 - should we be include that in the fix?