MaraDNS CVE-2014-2032 Remote Denial of Service Vulnerability

Bugtraq ID:	65595
Class:	Input Validation Error
CVE:	CVE-2014-2032
Remote:	Yes
Local:	No
Published:	Feb 17 2014 12:00AM
Updated:	Apr 13 2015 09:59PM
Credit:	The vendor reported this issue.
Vulnerable:	MaraDNS MaraDNS 2.0.8 MaraDNS MaraDNS 2.0.7 MaraDNS MaraDNS 1.4.13 MaraDNS MaraDNS 1.4.9 MaraDNS MaraDNS 1.4.6 MaraDNS MaraDNS 1.4.5 MaraDNS MaraDNS 1.4.12 MaraDNS MaraDNS 1.4.03
Not Vulnerable:	MaraDNS MaraDNS 2.0.9 MaraDNS MaraDNS 1.4.14

MaraDNS CVE-2014-2032 Remote Denial of Service Vulnerability

MaraDNS is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the application, denying service to legitimate users.

MaraDNS versions prior to 1.4.14 and 2.0.09 are vulnerable.

MaraDNS CVE-2014-2032 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MaraDNS CVE-2014-2032 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information

MaraDNS CVE-2014-2032 Remote Denial of Service Vulnerability

References:

• Bug 1064750 - maradns-2.0.09 is available (Red Hat)
  
• MaraDNS Patch- GitHub (MaraDNS)
  
• MaraDNS security update (Samiam)