Back to Database
Status published
Medium
CVE-2010-2444
parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does...
Vulnerability Description
parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-2444
Credits & Attribution
No credits recorded in the NVD database.
References
More from maradns
View All →CVE-2022-30256
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that...
Unknown
0
CVE-2012-1570
The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12...
Medium
4.3
CVE-2012-0024
MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values...
High
7.8
CVE-2011-5056
The authoritative server in MaraDNS through 2.0.04 computes hash values...
Low
2.1
CVE-2011-5055
MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data...
Medium
5
Affected Vendor
maradns
View all reports →Affected Software
maradns
Vulnerable Versions:
1.3.03, 1.3.04, 1.3.05, 1.3.06, 1.3.07.01, 1.3.07.02, 1.3.07.03, 1.3.07.04, 1.3.07.05, 1.3.07.06, 1.3.07.07, 1.3.07.08, 1.3.07.09, 1.3.08, 1.3.09, 1.3.10, 1.3.11, 1.3.12, 1.3.13, 1.3.14, 1.4.01, 1.4.02
Timeline
Official Publish:
June 25th, 2010
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.