PT-2012-2248 · Maradns · Maradns

Vincent Danen · Published 2012-01-08 · Updated 2020-08-19 · CVE-2012-0024

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MaraDNS versions prior to 1.3.07.12 MaraDNS versions 1.4.x prior to 1.4.08

Description The issue allows remote attackers to cause a denial of service by sending many crafted queries with the Recursion Desired bit set, resulting in CPU consumption due to predictable hash collisions.

Recommendations For MaraDNS versions prior to 1.3.07.12, update to version 1.3.07.12 or later. For MaraDNS versions 1.4.x prior to 1.4.08, update to version 1.4.08 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2012-0024

Affected Products

Maradns

References · 8

• https://osv.dev/vulnerability/CVE-2012-0024 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-0024 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0024 · Vendor Advisory
• http://samiam.org/blog/20111229.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-0024 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=771428 · Note
• http://openwall.com/lists/oss-security/2012/01/03/13 · Note
• http://openwall.com/lists/oss-security/2012/01/03/6 · Note