Denial of service in MaraDNS

Published: 2014-02-12 | Updated: 2018-03-26

Risk	Medium
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2014-2031 CVE-2014-2032
CWE-ID	CWE-125
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	MaraDNS Server applications / DNS servers
Vendor	Sam Trenholme

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Out-of-bounds read

EUVDB-ID: #VU11266

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2014-2031

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote unauthenticated attacker to cause DoS condition on the target system.

The weakness exists due to improper bounds checking. A remote attacker can send a specially crafted packet, trigger out-of-bounds read and cause the service to crash.

Mitigation

Update Deadwood to version 3.2.05 or later.

Vulnerable software versions

MaraDNS: 1.14.0 - 2.0.0

CPE2.3

External links

https://samiam.org/blog/2014-02-12.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU11267