← Vulnerability feed

Vulnerability record · CVE-2007-3115 · published 7 June 2007

CVE-2007-3115: Maradns vulnerability

Maradns · Maradns

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (memory consumption) via (1) reverse lookups or (2) requests for records in a class other than Internet (IN), a different set of affected versions than CVE-2007-3114 and CVE-2007-3116.

7.8 CVSS 2.0 High EPSS 2.4% · top 16.6% CWE-399 · CWE-399
7.8CVSS 2.0 base score
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (memory consumption) via (1) reverse lookups or (2) requests for records in a class other than Internet (IN), a different set of affected versions than CVE-2007-3114 and CVE-2007-3116.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/37017
http://secunia.com/advisories/25406 PatchVendor Advisory
http://secunia.com/advisories/25767 Vendor Advisory
http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.06.tar.gz
http://www.debian.org/security/2007/dsa-1319
http://www.maradns.org/changelog.html
http://www.securityfocus.com/archive/1/471725/100/0/threaded
http://www.securityfocus.com/bid/24337 Patch
http://www.securitytracker.com/id?1018201
http://www.vupen.com/english/advisories/2007/2263 Vendor Advisory
http://osvdb.org/37017
http://secunia.com/advisories/25406 PatchVendor Advisory
http://secunia.com/advisories/25767 Vendor Advisory
http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.06.tar.gz
http://www.debian.org/security/2007/dsa-1319
http://www.maradns.org/changelog.html
http://www.securityfocus.com/archive/1/471725/100/0/threaded
http://www.securityfocus.com/bid/24337 Patch
http://www.securitytracker.com/id?1018201
http://www.vupen.com/english/advisories/2007/2263 Vendor Advisory

Track CVE-2007-3115 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2012-0024Maradns uncontrolled resource consumption vulnerabilityMaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predict…EPSS 2.7%7.5CVE-2023-31137Maradns vulnerabilityMaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely exploitable integer underflow…EPSS 1.1%7.5CVE-2022-30256Maradns vulnerabilityAn issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can s…EPSS 0.96%7.5CVE-2011-0520Maradns memory buffer overflow vulnerabilityThe compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a d…EPSS 5.2%5.0CVE-2011-5055Maradns improper input validation vulnerabilityMaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which…EPSS 1.4%5.0CVE-2008-0061Maradns vulnerabilityMaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS pack…EPSS 2.1%5.0CVE-2007-3114Maradns vulnerabilityMemory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory co…EPSS 1.7%5.0CVE-2007-3116Maradns vulnerabilityMemory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspeci…EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2007-3115), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.