CVE-2007-3116: Medium severity MaraDNS MaraDNS vulnerability

Published Jun 7, 2007

Updated

Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3114 and CVE-2007-3115.

Affected Software

2 affected components

MaraDNS MaraDNS=1.2.12.06

MaraDNS MaraDNS=1.3.05

Remediation

Patch Available

http://maradns.blogspot.com/search/label/MaraDNS

Event History

Jun 7, 2007

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3116?

CVE-2007-3116 is considered a medium severity vulnerability due to its potential to cause denial of service through memory consumption.

How do I fix CVE-2007-3116?

To fix CVE-2007-3116, upgrade MaraDNS to version 1.3.06 or later, as these versions contain patches for the vulnerability.

What are the affected versions in CVE-2007-3116?

CVE-2007-3116 affects MaraDNS versions 1.2.12.06 and 1.3.05.

Can CVE-2007-3116 be exploited remotely?

Yes, CVE-2007-3116 can be exploited remotely by attackers to trigger a memory leak and cause denial of service.

What is the impact of CVE-2007-3116 on affected systems?

The impact of CVE-2007-3116 on affected systems is increased memory consumption that can lead to service outages.