Unscored severity · published Jan 8, 2012
CVE-2011-5056
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files, a different vulnerability than CVE-2012-0024.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Maradns · Maradns
through 2.0.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5056
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5056
Patch
http://samiam.org/blog/20111229.html
Third Party Advisory
http://www.securitytracker.com/id?1026820
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72258
More from Maradns
7.5
CVE-2026-40719
Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be resolved
7.5
CVE-2023-31137
MaraDNS is open-source software that implements the Domain Name System (DNS)
7.5
CVE-2022-30256
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution
–
CVE-2012-1570
The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record…
–
CVE-2012-0024
MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote…