CVE search results

1 – 10 of 14 results

Detailed view

Sort by:

CVE-2023-31137

Medium priority

Some fixes available 5 of 6

MaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely exploitable integer underflow vulnerability in the DNS packet decompression function allows an attacker to...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	Fixed	Fixed	Fixed	Fixed

CVE-2022-30256

Medium priority

Some fixes available 5 of 6

An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a long time, including expired domains and taken-down...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	Fixed	Fixed	Fixed	Fixed

CVE-2014-2032

Medium priority

Not affected

Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	—	—	—	—

CVE-2014-2031

Medium priority

Ignored

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	—	—	—	—

CVE-2012-1570

Medium priority

Ignored

The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	—	—	Not affected	Not affected

CVE-2012-0024

Medium priority

Ignored

MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	—	—	—	—

CVE-2011-5056

Medium priority

Ignored

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	Not affected	Not affected	Not affected	Not affected

CVE-2011-5055

Medium priority

Ignored

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	Not affected	Not affected	Not affected	Not affected

CVE-2011-0520

Medium priority

Ignored

The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	—	—	Not affected	Not affected

CVE-2010-2444

Medium priority

Ignored

parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer...

1 affected packages

maradns

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
maradns	—	—	—	—	—

Export to JSON

Results by page:

Search CVE reports