PT-2018-4186

CVE-2014-2032

·

Published

2018-03-20

·

Updated

2018-04-18

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Deadwood versions prior to 2.3.09 Deadwood versions 3.x prior to 3.2.05 MaraDNS versions prior to 1.4.14 MaraDNS versions 2.x prior to 2.0.09
Description The issue allows remote attackers to cause a denial of service by performing recursive queries against Deadwood, due to missing input validation. This can result in an out-of-bounds read and crash.
Recommendations For Deadwood versions prior to 2.3.09, update to version 2.3.09 or later. For Deadwood versions 3.x prior to 3.2.05, update to version 3.2.05 or later. For MaraDNS versions prior to 1.4.14, update to version 1.4.14 or later. For MaraDNS versions 2.x prior to 2.0.09, update to version 2.0.09 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾