ID CVE-2007-3115
Summary Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (memory consumption) via (1) reverse lookups or (2) requests for records in a class other than Internet (IN), a different set of affected versions than CVE-2007-3114 and CVE-2007-3116.
References
Vulnerable Configurations
  • cpe:2.3:a:maradns:maradns:1.2.12.01:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.2.12.01:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.2.12.02:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.2.12.02:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.2.12.03:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.2.12.03:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.2.12.04:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.2.12.04:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.2.12.05:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.2.12.05:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.3.01:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.3.01:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.3.02:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.3.02:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.3.03:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.3.03:*:*:*:*:*:*:*
  • cpe:2.3:a:maradns:maradns:1.3.04:*:*:*:*:*:*:*
    cpe:2.3:a:maradns:maradns:1.3.04:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 16-10-2018 - 16:47)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 24337
bugtraq 20070619 MaraDNS denial of service vulnerabilities
confirm
debian DSA-1319
osvdb 37017
sectrack 1018201
secunia
  • 25406
  • 25767
vupen ADV-2007-2263
Last major update 16-10-2018 - 16:47
Published 07-06-2007 - 21:30
Last modified 16-10-2018 - 16:47
Back to Top