Login Request a demo
Unscored severity · published Jan 8, 2012
CVE-2011-5055
MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to…
–
CVSS
1.4%
EPSS
No
On KEV
Description
MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set. NOTE: this issue exists because of an incomplete fix for CVE-2012-0024.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Maradns · Maradns
1.3.07.012; 1.4.08 · source: NVD
Affected product
MA
Maradns
Maradns
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5055
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5055
openwall.com
http://openwall.com/lists/oss-security/2012/01/03/13
openwall.com
http://openwall.com/lists/oss-security/2012/01/03/6
Patch
http://samiam.org/blog/20111230.html
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=771428
More from Maradns
7.5
CVE-2026-40719
Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be resolved
7.5
CVE-2023-31137
MaraDNS is open-source software that implements the Domain Name System (DNS)
7.5
CVE-2022-30256
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution
–
CVE-2012-1570
The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record…
–
CVE-2012-0024
MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote…