CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when...
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
- Record
CVE-2016-7069- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2016-7949
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
- Record
EUVD-2016-7949- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v3pf-fvxp-8mjf
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when...
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
- Record
GHSA-v3pf-fvxp-8mjf- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
- Record
CVE-2016-7069- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
- Record
CVE-2016-7069- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
- Record
DEBIAN-CVE-2016-7069- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2016-7069
An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash.
- Record
UBUNTU-CVE-2016-7069- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12731-1 No score
dnsdist-1.8.0~rc1-1.1 on GA media
These are all security issues fixed in the dnsdist-1.8.0~rc1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12731-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2760-1 No score
Security update for dnsdist
This update for dnsdist fixes the following issues:
-
update to 1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)
- Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511)
-
update to 1.2.0 (bsc#1054799, bsc#1054802) This release also addresses two security issues of low severity, CVE-2016-7069 and CVE-2017-7557. The first issue can lead to a denial of service on 32-bit if a backend sends crafted answers, and the second to an alteration of dnsdist’s ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website.
- Record
SUSE-SU-2023:2760-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2760-2 No score
Security update for dnsdist
This update for dnsdist fixes the following issues:
-
update to 1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)
- Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511)
-
update to 1.2.0 (bsc#1054799, bsc#1054802) This release also addresses two security issues of low severity, CVE-2016-7069 and CVE-2017-7557. The first issue can lead to a denial of service on 32-bit if a backend sends crafted answers, and the second to an alteration of dnsdist’s ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website.
- Record
SUSE-SU-2023:2760-2- Updated
- 2026-11-02
OSVSUSE-SU-2023:2777-1 No score
Security update for dnsdist
This update for dnsdist fixes the following issues:
- Implements package 'dnsdist' with version 1.8.0 in SLE15. (jsc#PED-3402)
- Downstream DNS resolver configuration should be chosen by the admin
- Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511)
- Security fix: There is an issue that can lead to a denial of service on 32-bit if a backend sends crafted answers. (CVE-2016-7069, bsc#1054799)
- Security fix: Alteration of dnsdist's ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website. (CVE-2017-7557, bsc#1054799)
- SNMP support, exporting statistics and sending traps
- Preventing the packet cache from ageing responses when deployed in
- Various DNSCrypt-related fixes and improvements, including automatic key rotation
- Record
SUSE-SU-2023:2777-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dnsdistDebian:12 |
before 1.2.0-1 | 1.2.0-1 |
dnsdistDebian:13 |
before 1.2.0-1 | 1.2.0-1 |
dnsdistDebian:14 |
before 1.2.0-1 | 1.2.0-1 |
dnsdistSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 3 CVEs |
before 1.8.0-150400.9.3.1 | 1.8.0-150400.9.3.1 |
luajitSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
luajitSUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
luajitSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
luajitSUSE:Linux Enterprise Workstation Extension 15 SP4 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
luajitSUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
dnsdistopenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 1.8.0-150400.9.3.1 | 1.8.0-150400.9.3.1 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
luajitopenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
dnsdistopenSUSE:Leap 15.5 From an advisory covering 3 CVEs |
before 1.8.0-150400.9.3.1 | 1.8.0-150400.9.3.1 |
luajitopenSUSE:Leap 15.5 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
dnsdistSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 3 CVEs |
before 1.8.0-150400.9.3.1 | 1.8.0-150400.9.3.1 |
luajitSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 3 CVEs |
before 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 | 2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 |
dnsdistSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.8.0-150100.3.5.1 | 1.8.0-150100.3.5.1 |
dnsdistSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.8.0-150100.3.5.1 | 1.8.0-150100.3.5.1 |
dnsdistSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 3 CVEs |
before 1.8.0-150100.3.5.1 | 1.8.0-150100.3.5.1 |
dnsdistSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 3 CVEs |
before 1.8.0-150100.3.5.1 | 1.8.0-150100.3.5.1 |
dnsdistSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 3 CVEs |
before 1.8.0-150100.3.5.1 | 1.8.0-150100.3.5.1 |
dnsdistUbuntu:16.04:LTS |
All versions, plus listed versions 1.0.0~alpha2-1 |
None known |
dnsdistopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 1.8.0~rc1-1.1 | 1.8.0~rc1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-7069 is a medium vulnerability (CVSS 5.9) in Open-xchange Dnsdist, published September 11, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.58%, the 91st percentile. Fixed in dnsdist 1.2.0-1.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7069
securityfocus.com/bid/100509
dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-01.html
nvd.nist.gov/vuln/detail/CVE-2016-7069
github.com/advisories/GHSA-v3pf-fvxp-8mjf
security-tracker.debian.org/tracker/CVE-2016-7069
Show 12 moreShow less
suse.com/support/update/announcement/2023/suse-su-20232760-1
bugzilla.suse.com/1054799
ubuntu.com/security/CVE-2016-7069
downloads.powerdns.com/patches/2017-01
cve.org/CVERecord?id=CVE-2016-7069