MA
Product
MaraDNS
15
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add MaraDNS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40719 | 7.5 | Apr 15 | Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be resolved Affected: 3.5.0036 |
| CVE-2023-31137 | 7.5 | May 9 | MaraDNS is open-source software that implements the Domain Name System (DNS) Affected: before 3.4.10; 3.5.0001 before 3.5.0036 |
| CVE-2022-30256 | 7.5 | Nov 19 | An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution Affected: before 3.4.03; 3.5.0 before 3.5.0022 |
| CVE-2012-1570 | – | Mar 28 | The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record… Affected: before 1.3.07.15; 1.4.0 before 1.4.12 |
| CVE-2012-0024 | – | Jan 8 | MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote… Affected: before 1.3.07.12; 1.4.0 before 1.4.08 |
| CVE-2011-5056 | – | Jan 8 | The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow… Affected: through 2.0.04 |
| CVE-2011-5055 | – | Jan 8 | MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to… Affected: 1.3.07.012; 1.4.08 |
| CVE-2011-0520 | – | Jan 28 | The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a denial of service (segmentation… Affected: 1.4.03; 1.4.05 |
| CVE-2010-2444 | – | Jun 25 | parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers… Affected: 1.3.03; 1.3.04; 1.3.05; 1.3.06; 1.3.07.01; 1.3.07.02; +16 more |
| CVE-2008-0061 | – | Jan 3 | MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an… Affected: 1.0.00; 1.0.01; 1.0.02; 1.0.03; 1.0.04; 1.0.05; +34 more |
| CVE-2007-3116 | – | Jun 7 | Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set… Affected: 1.2.12.06; 1.3.05 |
| CVE-2007-3115 | – | Jun 7 | Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (memory consumption) via (1)… Affected: 1.2.12.01; 1.2.12.02; 1.2.12.03; 1.2.12.04; 1.2.12.05; 1.3.01; +3 more |
| CVE-2007-3114 | – | Jun 7 | Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified… Affected: 1.2.12.01; 1.2.12.02; 1.2.12.03; 1.2.12.04; 1.3.01; 1.3.02 |
| CVE-2004-0789 | – | Dec 31 | Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite… Affected: 0.5.28; 0.5.29; 0.5.30; 0.5.31; 0.8.05 |
| CVE-2002-2097 | – | Dec 31 | The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets Affected: 0.5.28; 0.5.29; 0.5.30; 0.8.99; 0.9.00 |
Showing 15