Vulnerability in Maradns

CVE-2010-2444

parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.

EPSS: 0.019 (77.1th percentile) — read the EPSS interpretation.

Affected products

Maradns — versions 1.3.07.03, 1.3.08, 1.3.06
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (mailing-list, x_refsource_MLIST, Patch)
cve@mitre.org (x_refsource_CONFIRM, Patch)