PT-2012-2248 · Maradns · Maradns

Vincent Danen · Publicado 2012-01-08 · Atualizado 2020-08-19 · CVE-2012-0024

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MaraDNS versions prior to 1.3.07.12 MaraDNS versions 1.4.x prior to 1.4.08

Description The issue allows remote attackers to cause a denial of service by sending many crafted queries with the Recursion Desired bit set, resulting in CPU consumption due to predictable hash collisions.

Recommendations For MaraDNS versions prior to 1.3.07.12, update to version 1.3.07.12 or later. For MaraDNS versions 1.4.x prior to 1.4.08, update to version 1.4.08 or later.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2012-0024

Produtos afetados

Maradns

Referências · 8

• https://bugzilla.redhat.com/show_bug.cgi?id=771428 · Nota
• https://osv.dev/vulnerability/CVE-2012-0024 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2012-0024 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0024 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/01/03/13 · Nota
• http://samiam.org/blog/20111229.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2012-0024 · Nota de Segurança
• http://openwall.com/lists/oss-security/2012/01/03/6 · Nota