CVE-2014-2032 Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging....
MediumCVSS 5.9
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries against Deadwood, related to missing input validation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maradns project maradns | < 1.4.14 | 1.4.14 |
| maradns project maradns | >= 2.0.05, < 2.0.09 | 2.0.09 |
| deadwood project deadwood | < 2.3.09 | 2.3.09 |
| deadwood project deadwood | >= 3.0.01, < 3.2.05 | 3.2.05 |
References
- samiam.org patch vendor-advisory
- [oss-security] 20140219 Re: CVE request: MaraDNS DoS due to incorrect bounds checking on certain strings mailing-list
- 65595 third-party-advisory vdb-entry
- 1029771 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking
- maradns-cve20142032-dos(91204) third-party-advisory vdb-entry