PT-2007-4399 · Debian+2 · Maradns

Published 2007-06-07 · Updated 2018-10-16 · CVE-2007-3115

OSV

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (memory consumption) via (1) reverse lookups or (2) requests for records in a class other than Internet (IN), a different set of affected versions than CVE-2007-3114 and CVE-2007-3116.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-3115

DSA-1319-1

Affected Products

Maradns

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2007-3115 · Security Note
• http://securityfocus.com/bid/24337 · Patch
• https://osv.dev/vulnerability/CVE-2007-3115 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-3115 · Vendor Advisory
• http://secunia.com/advisories/25767 · Vendor Advisory
• http://debian.org/security/2007/dsa-1319 · Vendor Advisory
• http://vupen.com/english/advisories/2007/2263 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-3115 · Vendor Advisory
• http://secunia.com/advisories/25406 · Vendor Advisory
• http://osvdb.org/37017 · Note
• http://securitytracker.com/id?1018201 · Note
• http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.06.tar.gz · Note
• http://maradns.org/changelog.html · Note
• http://securityfocus.com/archive/1/471725/100/0/threaded · Note