PT-2018-4185 · Maradns · Maradns+1

Publicado 2018-03-20 · Atualizado 2018-04-18 · CVE-2014-2031

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Deadwood versions prior to 2.3.09 Deadwood versions 3.x prior to 3.2.05 MaraDNS versions prior to 1.4.14 MaraDNS versions 2.x prior to 2.0.09

Description The issue allows remote attackers to cause a denial of service by performing recursive queries against Deadwood, due to a logic error. This results in an out-of-bounds read and crash.

Recommendations For Deadwood versions prior to 2.3.09, update to version 2.3.09 or later. For Deadwood versions 3.x prior to 3.2.05, update to version 3.2.05 or later. For MaraDNS versions prior to 1.4.14, update to version 1.4.14 or later. For MaraDNS versions 2.x prior to 2.0.09, update to version 2.0.09 or later.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2014-2031

Produtos afetados

Deadwood

Maradns

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-2031 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/02/19/15 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91203 · Nota
• http://samiam.org/blog/2014-02-12.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1066609 · Nota
• http://securitytracker.com/id/1029771 · Nota