CVE-2011-5056
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records…
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files, a different vulnerability than CVE-2012-0024.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 0.38% probability · 32th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-400
- Affected
- maradns/maradns
- Source
- cve@mitre.org
References
- http://samiam.org/blog/20111229.htmlPatch, Third Party Advisory
- http://www.securitytracker.com/id?1026820Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72258Third Party Advisory, VDB Entry
- http://samiam.org/blog/20111229.htmlPatch, Third Party Advisory
- http://www.securitytracker.com/id?1026820Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72258Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.