CVE-2010-2444 | BDVDB-2026-42344 Detail

Description#

parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2010/06/24/5
http://www.openwall.com/lists/oss-security/2010/06/09/4
http://maradns.org/download/maradns-1.4.02-parse_segfault.patch

Exploit#

No public exploit known

History#

Version 12010-06-25Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.