CVEvulnerability

CVE-2010-2444

4.3 MEDIUM Published 2010-06-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-06-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.

Affected configurations

• maradns maradns 1.3.03 • maradns maradns 1.3.04 • maradns maradns 1.3.05 • maradns maradns 1.3.06 • maradns maradns 1.3.07.01 • maradns maradns 1.3.07.02 • maradns maradns 1.3.07.03 • maradns maradns 1.3.07.04 • maradns maradns 1.3.07.05 • maradns maradns 1.3.07.06 • maradns maradns 1.3.07.07 • maradns maradns 1.3.07.08 • maradns maradns 1.3.07.09 • maradns maradns 1.3.08 • maradns maradns 1.3.09 • maradns maradns 1.3.10 • maradns maradns 1.3.11 • maradns maradns 1.3.12 • maradns maradns 1.3.13 • maradns maradns 1.3.14 • maradns maradns 1.4.01 • maradns maradns 1.4.02

References