medium5.0
CVE-2011-5055
MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows re…
Impact
MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set. NOTE: this issue exists because of an incomplete fix for CVE-2012-0024.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maradns | Maradns | Versions 1.3.07.012, 1.4.08 |
Weakness classification
References
- NVD record
- CVE.org record
- http://openwall.com/lists/oss-security/2012/01/03/13
- http://openwall.com/lists/oss-security/2012/01/03/6
- http://samiam.org/blog/20111230.html
- https://bugzilla.redhat.com/show_bug.cgi?id=771428
- http://openwall.com/lists/oss-security/2012/01/03/13
- http://openwall.com/lists/oss-security/2012/01/03/6
- http://samiam.org/blog/20111230.html
- https://bugzilla.redhat.com/show_bug.cgi?id=771428