PT-2018-4186
CVE-2014-2032
·
Publicado
2018-03-20
·
Atualizado
2018-04-18
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Deadwood versions prior to 2.3.09
Deadwood versions 3.x prior to 3.2.05
MaraDNS versions prior to 1.4.14
MaraDNS versions 2.x prior to 2.0.09
Description
The issue allows remote attackers to cause a denial of service by performing recursive queries against Deadwood, due to missing input validation. This can result in an out-of-bounds read and crash.
Recommendations
For Deadwood versions prior to 2.3.09, update to version 2.3.09 or later.
For Deadwood versions 3.x prior to 3.2.05, update to version 3.2.05 or later.
For MaraDNS versions prior to 1.4.14, update to version 1.4.14 or later.
For MaraDNS versions 2.x prior to 2.0.09, update to version 2.0.09 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾