CVE-2012-0024

Опубликовано: 08 янв. 2012

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set.

Ссылки

http://openwall.com/lists/oss-security/2012/01/03/13
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2012/01/03/6
Mailing List
Third Party Advisory
http://samiam.org/blog/20111229.html
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=771428
Issue Tracking
Third Party Advisory
http://openwall.com/lists/oss-security/2012/01/03/13
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2012/01/03/6
Mailing List
Third Party Advisory
http://samiam.org/blog/20111229.html
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=771428
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maradns:maradns:*:*:*:*:*:*:*:*

Версия до 1.3.07.12 (исключая)

cpe:2.3:a:maradns:maradns:*:*:*:*:*:*:*:*

Версия от 1.4.0 (включая) до 1.4.08 (исключая)

EPSS

Процентиль: 73%

0.00757

Низкий

7.8 High

CVSS2

Дефекты

CWE-400

Связанные уязвимости

CVE-2012-0024

ubuntu

около 14 лет назад

CVE-2012-0024

debian

около 14 лет назад

MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values ...

GHSA-34xr-8rpc-3j54

github

почти 4 года назад

EPSS

Процентиль: 73%

0.00757

Низкий

7.8 High

CVSS2

Дефекты

CWE-400