CVE-2014-2032

CVE-2014-2032

EPSS 2.0%

Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries against Deadwood, related to missing input validation.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://samiam.org/blog/2014-02-12.html https://bugzilla.redhat.com/show_bug.cgi?id=1066609 https://exchange.xforce.ibmcloud.com/vulnerabilities/91204 http://www.openwall.com/lists/oss-security/2014/02/19/15 http://www.securityfocus.com/bid/65595 http://www.securitytracker.com/id/1029771