CVE-2011-5056

EPSS 0.08%
Published 08.01.2012 00:55:03
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files, a different vulnerability than CVE-2012-0024.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Maradns ≫ Maradns Version <= 2.0.04

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.203

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:N/I:N/A:P

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

http://samiam.org/blog/20111229.html

Patch

Third Party Advisory

http://www.securitytracker.com/id?1026820

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/72258

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2011-5056

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-5056

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-5056

EUVD