← Back

CVE-2014-2031

nvd nist
Published: Mar 20, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries against Deadwood, related to a logic error.

Affected (4)

Maradns Project
1 product
Maradns
Deadwood Project
1 product
Deadwood
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Maradns Project
Maradns
Before 1.4.14
Maradns
From 2.0.05 to 2.0.09
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Deadwood Project
Deadwood
Before 2.3.09
Deadwood
From 3.0.01 to 3.2.05

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (10)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Mailing List
Source: secalert@redhat.com
Third Party AdvisoryVDB Entry
Source: secalert@redhat.com
Issue Tracking
Source: secalert@redhat.com
VDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
VDB Entry

Timeline

No history available yet.