CVE-2011-0520 - CVE House
Back to Database
Status published High CVE-2011-0520

The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and...

Vulnerability Description

The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long DNS hostname with a large number of labels, which triggers a heap-based buffer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-0520

Credits & Attribution

No credits recorded in the NVD database.

References

More from maradns

View All →
CVE-2022-30256
An issue was discovered in MaraDNS Deadwood through 3.5.0021 that...
Unknown 0
CVE-2012-1570
The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12...
Medium 4.3
CVE-2012-0024
MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values...
High 7.8
CVE-2011-5056
The authoritative server in MaraDNS through 2.0.04 computes hash values...
Low 2.1
CVE-2011-5055
MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data...
Medium 5

Affected Vendor

Affected Software

maradns
Vulnerable Versions:
1.4.03, 1.4.05

Timeline

Official Publish: January 28th, 2011
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.