CVE-2011-5055

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows…

published January 8, 2012

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set. NOTE: this issue exists because of an incomplete fix for CVE-2012-0024.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01447 · 73.0th percentile
Published
2012-01-08T00:00Z
EPSS history
Timeline
  • 08 JAN 00:00Z
    MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows…
    cvelistv5