CVE-2011-5056: Low severity maradns project maradns vulnerability
MaraDNS suffers from an error with the hash generation function which can be exploited to cause a hash collision resulting in high CPU consumption (Denial of Service). This flaw has been corrected in versions 1.3.07.13 and 1.4.09.
References:
http://samiam.org/blog/20111229.html http://samiam.org/blog/20111230.html
No CVE has been assigned as of yet.
Other sources
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files, a different vulnerability than CVE-2012-0024.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-5056?
CVE-2011-5056 is classified as a Denial of Service vulnerability due to high CPU consumption from hash collisions.
How do I fix CVE-2011-5056?
To fix CVE-2011-5056, upgrade to MaraDNS version 1.3.07.13 or 1.4.09.
Which versions of MaraDNS are affected by CVE-2011-5056?
CVE-2011-5056 affects MaraDNS versions prior to 1.3.07.13 and 1.4.09.
What type of attack does CVE-2011-5056 facilitate?
CVE-2011-5056 facilitates Denial of Service attacks via hash collision exploitation.
Is CVE-2011-5056 related to specific operating systems?
CVE-2011-5056 is related to MaraDNS packages available on Red Hat systems.