CVE-2010-2444 parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of....
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maradns | = 1.3.03 | No fix listed |
| maradns | = 1.3.04 | No fix listed |
| maradns | = 1.3.05 | No fix listed |
| maradns | = 1.3.06 | No fix listed |
| maradns | = 1.3.07.01 | No fix listed |
| maradns | = 1.3.07.02 | No fix listed |
| maradns | = 1.3.07.03 | No fix listed |
| maradns | = 1.3.07.04 | No fix listed |
| maradns | = 1.3.07.05 | No fix listed |
| maradns | = 1.3.07.06 | No fix listed |
| maradns | = 1.3.07.07 | No fix listed |
| maradns | = 1.3.07.08 | No fix listed |
| maradns | = 1.3.07.09 | No fix listed |
| maradns | = 1.3.08 | No fix listed |
| maradns | = 1.3.09 | No fix listed |
| maradns | = 1.3.10 | No fix listed |
| maradns | = 1.3.11 | No fix listed |
| maradns | = 1.3.12 | No fix listed |
| maradns | = 1.3.13 | No fix listed |
| maradns | = 1.3.14 | No fix listed |
| maradns | = 1.4.01 | No fix listed |
| maradns | = 1.4.02 | No fix listed |
| debian/maradns(Debian:11) | < 1.4.03-1 | 1.4.03-1 |
References
- maradns.org patch
- [oss-security] 20100610 CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc mailing-list patch
- [oss-security] 20100624 Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc mailing-list
- security-tracker.debian.org vendor-advisory