VulnerabilityModified
CVE-2014-2031
Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries against…
MEDIUM 5.9EPSS 1.71%
Does this matter?
Lower severity and a low EPSS score (1.71%). Track it; it rarely justifies an emergency change on its own.
Description
Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries against Deadwood, related to a logic error.
- CVSS 3.0
- 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.71% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- maradns project/maradns · deadwood project/deadwood
- Source
- secalert@redhat.com
References
- http://samiam.org/blog/2014-02-12.htmlVendor Advisory
- http://www.openwall.com/lists/oss-security/2014/02/19/15Mailing List
- http://www.securitytracker.com/id/1029771Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1066609Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91203VDB Entry
- http://samiam.org/blog/2014-02-12.htmlVendor Advisory
- http://www.openwall.com/lists/oss-security/2014/02/19/15Mailing List
- http://www.securitytracker.com/id/1029771Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1066609Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91203VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.