PT-2012-2035 · Maradns · Maradns

Publicado 2012-01-08 · Atualizado 2020-08-14 · CVE-2011-5056

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MaraDNS versions through 2.0.04

Description The issue allows local users to cause a denial of service, specifically CPU consumption, by crafting records in zone files that trigger hash collisions predictably. This is due to the lack of restriction on computing hash values for DNS data.

Recommendations For MaraDNS versions through 2.0.04, consider updating to a version that addresses this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2011-5056

Produtos afetados

Maradns

Referências · 4

• http://samiam.org/blog/20111229.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2011-5056 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72258 · Nota
• http://securitytracker.com/id?1026820 · Nota