BlueCat Edge v25.1.4 release notes - Release Notes - BlueCat Edge

BlueCat Edge release notes
ft:locale
en-US
Product name
BlueCat Edge

Announcement date: May 22, 2025

 

Resolved issues

DNS Resolver Service truncates large DNS responses sent over UDP

Previously, when a DNS response is sent over UDP and the response is either larger than the client's accepted response payload or larger than 512 bytes if a response payload size is not specified, the DNS resolver service truncates the response by removing all response records to preserve the question section. This results in errors when the following scenario occurs:
  • The client sends a request over UDP.
  • The DNS response received by the client has the TC (truncated) header bit set.
  • The client is unable or unwilling to retry sending the request using a different mechanism, such as TCP.

CVE-2004-0789 Multiple implementations of the DNS protocol allow remote attackers to cause a denial of service

DNS Resolver Service 4.0.2 includes changes to address CVE-2004-0789 with the following description:

Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.