Skip to content
Noroxi

MaraDNS records

14 published records for vendor maradns.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
85.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2011-0520
    32Monitor

    The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to

    HighCVSS 7.5No exploitEPSS 5%

    maradns · maradnsJan 28, 2011

  • CVE-2012-0024
    32Monitor

    MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collision

    HighCVSS 7.8No exploitEPSS 2%

    maradns · maradnsJan 7, 2012

  • CVE-2007-3115
    32Monitor

    Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of

    HighCVSS 7.8No exploitEPSS 2%

    maradns · maradnsJun 7, 2007

  • CVE-2023-31137
    30Monitor

    MaraDNS Integer Underflow Vulnerability in DNS Packet Decompression

    HighCVSS 7.5No exploitEPSS 1%

    maradns · maradnsMay 9, 2023

  • CVE-2022-30256
    30Monitor

    An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution.

    HighCVSS 7.5No exploitEPSS 0%

    maradns · maradnsNov 18, 2022

  • CVE-2004-0789
    21Monitor

    Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before

    MediumCVSS 5.0Proof of conceptEPSS 2%

    posadis · posadisDec 31, 2004

  • CVE-2008-0061
    21Monitor

    MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted

    MediumCVSS 5.0No exploitEPSS 2%

    maradns · maradnsJan 3, 2008

  • CVE-2007-3114
    21Monitor

    Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (

    MediumCVSS 5.0No exploitEPSS 1%

    maradns · maradnsJun 7, 2007

  • CVE-2002-2097
    20Monitor

    The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets.

    MediumCVSS 5.0No exploitEPSS 1%

    maradns · maradnsDec 31, 2002

  • CVE-2011-5055
    20Monitor

    MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictab

    MediumCVSS 5.0No exploitEPSS 1%

    maradns · maradnsJan 7, 2012

  • CVE-2007-3116
    20Monitor

    Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) vi

    MediumCVSS 5.0No exploitEPSS 1%

    maradns · maradnsJun 7, 2007

  • CVE-2012-1570
    18Monitor

    The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the pro

    MediumCVSS 4.3No exploitEPSS 2%

    maradns · maradnsMar 28, 2012

  • CVE-2010-2444
    18Monitor

    parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) ch

    MediumCVSS 4.3No exploitEPSS 1%

    maradns · maradnsJun 25, 2010

  • CVE-2011-5056
    8Monitor

    The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisi

    LowCVSS 2.1No exploitEPSS 0%

    maradns · maradnsJan 7, 2012