CVE-2008-0061 MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) reco...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving, aka "improper rotation of resource records."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maradns | = 1.0.00 | No fix listed |
| maradns | = 1.0.01 | No fix listed |
| maradns | = 1.0.02 | No fix listed |
| maradns | = 1.0.03 | No fix listed |
| maradns | = 1.0.04 | No fix listed |
| maradns | = 1.0.05 | No fix listed |
| maradns | = 1.0.06 | No fix listed |
| maradns | = 1.0.07 | No fix listed |
| maradns | = 1.0.08 | No fix listed |
| maradns | = 1.0.09 | No fix listed |
| maradns | = 1.0.10 | No fix listed |
| maradns | = 1.0.11 | No fix listed |
| maradns | = 1.0.12 | No fix listed |
| maradns | = 1.0.13 | No fix listed |
| maradns | = 1.0.14 | No fix listed |
| maradns | = 1.0.15 | No fix listed |
| maradns | = 1.0.16 | No fix listed |
| maradns | = 1.0.17 | No fix listed |
| maradns | = 1.0.18 | No fix listed |
| maradns | = 1.0.19 | No fix listed |
| maradns | = 1.0.20 | No fix listed |
| maradns | = 1.0.21 | No fix listed |
| maradns | = 1.0.22 | No fix listed |
| maradns | = 1.0.23 | No fix listed |
| maradns | = 1.0.24 | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| maradns | = 1.0.25 | No fix listed |
| maradns | = 1.0.26 | No fix listed |
| maradns | = 1.0.27 | No fix listed |
| maradns | = 1.0.28 | No fix listed |
| maradns | = 1.0.29 | No fix listed |
| maradns | = 1.0.30 | No fix listed |
| maradns | = 1.0.31 | No fix listed |
| maradns | = 1.0.32 | No fix listed |
| maradns | = 1.0.33 | No fix listed |
| maradns | = 1.0.34 | No fix listed |
| maradns | = 1.0.35 | No fix listed |
| maradns | = 1.0.36 | No fix listed |
| maradns | = 1.0.37 | No fix listed |
| maradns | = 1.0.38 | No fix listed |
| maradns | = 1.0.39 | No fix listed |
| maradns | = 1.2.12.01 | No fix listed |
| maradns | = 1.2.12.02 | No fix listed |
| maradns | = 1.2.12.03 | No fix listed |
| maradns | = 1.2.12.04 | No fix listed |
| maradns | = 1.2.12.05 | No fix listed |
| maradns | = 1.2.12.06 | No fix listed |
| maradns | = 1.2.12.07 | No fix listed |
| maradns | = 1.3.01 | No fix listed |
| maradns | = 1.3.02 | No fix listed |
| maradns | = 1.3.03 | No fix listed |
| maradns | = 1.3.04 | No fix listed |
| maradns | = 1.3.05 | No fix listed |
| maradns | = 1.3.06 | No fix listed |
| maradns | = 1.3.07 | No fix listed |
| maradns | = 1.3.07.01 | No fix listed |
| maradns | = 1.3.07.02 | No fix listed |
| maradns | = 1.3.07.03 | No fix listed |
| debian/maradns(Debian:11) | < 1.2.12.08-1 | 1.2.12.08-1 |
References
- bugs.gentoo.org
- maradns.blogspot.com
- 28329 third-party-advisory
- 28334 third-party-advisory
- 28650 third-party-advisory
- GLSA-200801-16 vendor-advisory
- DSA-1445 vendor-advisory
- www.maradns.org
- 27124 vdb-entry
- ADV-2008-0026 vdb-entry
- security-tracker.debian.org vendor-advisory