4.3

CVE-2010-2444

parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Maradns ≫ Maradns Version1.3.03
Maradns ≫ Maradns Version1.3.04
Maradns ≫ Maradns Version1.3.05
Maradns ≫ Maradns Version1.3.06
Maradns ≫ Maradns Version1.3.07.01
Maradns ≫ Maradns Version1.3.07.02
Maradns ≫ Maradns Version1.3.07.03
Maradns ≫ Maradns Version1.3.07.04
Maradns ≫ Maradns Version1.3.07.05
Maradns ≫ Maradns Version1.3.07.06
Maradns ≫ Maradns Version1.3.07.07
Maradns ≫ Maradns Version1.3.07.08
Maradns ≫ Maradns Version1.3.07.09
Maradns ≫ Maradns Version1.3.08
Maradns ≫ Maradns Version1.3.09
Maradns ≫ Maradns Version1.3.10
Maradns ≫ Maradns Version1.3.11
Maradns ≫ Maradns Version1.3.12
Maradns ≫ Maradns Version1.3.13
Maradns ≫ Maradns Version1.3.14
Maradns ≫ Maradns Version1.4.01
Maradns ≫ Maradns Version1.4.02
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.631
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P