4.3

CVE-2010-2444

parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Maradns ≫ Maradns Version 1.3.03
Maradns ≫ Maradns Version 1.3.04
Maradns ≫ Maradns Version 1.3.05
Maradns ≫ Maradns Version 1.3.06
Maradns ≫ Maradns Version 1.3.07.01
Maradns ≫ Maradns Version 1.3.07.02
Maradns ≫ Maradns Version 1.3.07.03
Maradns ≫ Maradns Version 1.3.07.04
Maradns ≫ Maradns Version 1.3.07.05
Maradns ≫ Maradns Version 1.3.07.06
Maradns ≫ Maradns Version 1.3.07.07
Maradns ≫ Maradns Version 1.3.07.08
Maradns ≫ Maradns Version 1.3.07.09
Maradns ≫ Maradns Version 1.3.08
Maradns ≫ Maradns Version 1.3.09
Maradns ≫ Maradns Version 1.3.10
Maradns ≫ Maradns Version 1.3.11
Maradns ≫ Maradns Version 1.3.12
Maradns ≫ Maradns Version 1.3.13
Maradns ≫ Maradns Version 1.3.14
Maradns ≫ Maradns Version 1.4.01
Maradns ≫ Maradns Version 1.4.02
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.86% 0.765
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://maradns.org/download/maradns-1.4.02-parse_segfault.patch
Patch
http://www.openwall.com/lists/oss-security/2010/06/09/4
Patch
http://www.openwall.com/lists/oss-security/2010/06/24/5