Ticket #406 (closed defect: wontfix)

Opened 18 months ago

Last modified 8 months ago

pdns crashes on recursive queries (CVE-2011-4313 perhaps?)

Reported by: anon Owned by: ahu
Priority: high Milestone:
Component: auth Version: 2.9.22
Severity: critical Keywords:
Cc: adi@…

Description

CentOS 5.7 using PDNS with MySQL backend.

Linux server 2.6.18-274.3.1.el5 #1 SMP Tue Sep 6 20:14:03 EDT 2011 i686 i686 i386 GNU/Linux

pdns_server --version

Version: 2.9.22, compiled on Jan 26 2009, 12:00:34 with gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)

Last night I had one of my servers (using MySQL backend) crashing repeatedly after receiving a very large number of recursion requests. Few log entries in pdns_crash_log_extras.gz I haven't restarted yet, currently there's a pdns-server-instance listening, but stuck, not responding any queries. gdb backtrace in pdns_crash_backtrace.gz

Attachments

pdns_crash_backtrace.gz Download (1.5 KB) - added by anon 18 months ago.
backtrace
pdns_crash_log_extras.gz Download (1.3 KB) - added by anon 18 months ago.
pdns log entries

Change History

Changed 18 months ago by anon

backtrace

Changed 18 months ago by anon

pdns log entries

Changed 18 months ago by peter

As far as I can tell from the logs, the issue seems to be that MySQL is being overloaded, and PowerDNS is crashing during reconnect. If you can reproduce the issue with 3.0 or current SVN, I would be happy to investigate, as it is likely this bug has been fixed after 2.9.22.

Changed 18 months ago by peter

Note that it is highly unlikely that this is related to CVE-2011-4313 :)

Changed 18 months ago by peter

  • version set to 2.9.22

Changed 18 months ago by anon

Peter, thanks for checking it out. Are you saying that there is a bug which could match with the description in 2.9.22 that's been fixed in 3.0? Unfortunately I don't have the time right now to set up a 3.0 installation in a test environment and start working on replicating it. But I'll keep an eye on the affected server, haven't seen it crashing again since then.

Changed 18 months ago by peter

MySQL overload is handled badly in 2.9.22; semi-reasonably in 3.0.

Changed 13 months ago by peter

  • owner changed from somebody to ahu
  • component changed from component1 to auth

Changed 8 months ago by ahu

  • status changed from new to closed
  • resolution set to wontfix

We're not doing 2.9.22 maintenance anymore..

Note: See TracTickets for help on using tickets.