PT-2018-4186 · Maradns · Maradns+1

Publicado 2018-03-20 · Atualizado 2018-04-18 · CVE-2014-2032

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Deadwood versions prior to 2.3.09 Deadwood versions 3.x prior to 3.2.05 MaraDNS versions prior to 1.4.14 MaraDNS versions 2.x prior to 2.0.09

Description The issue allows remote attackers to cause a denial of service by performing recursive queries against Deadwood, due to missing input validation. This can result in an out-of-bounds read and crash.

Recommendations For Deadwood versions prior to 2.3.09, update to version 2.3.09 or later. For Deadwood versions 3.x prior to 3.2.05, update to version 3.2.05 or later. For MaraDNS versions prior to 1.4.14, update to version 1.4.14 or later. For MaraDNS versions 2.x prior to 2.0.09, update to version 2.0.09 or later.

Correção

Out of bounds Read

RCE

Enumeração de Fraquezas

CWE-125

CWE-20

Identificadores relacionados

CVE-2014-2032

Produtos afetados

Deadwood

Maradns

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-2032 · Nota de Segurança
• http://securityfocus.com/bid/65595 · Nota
• http://openwall.com/lists/oss-security/2014/02/19/15 · Nota
• http://samiam.org/blog/2014-02-12.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1066609 · Nota
• http://securitytracker.com/id/1029771 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91204 · Nota