← Vulnerability feed

Vulnerability record · CVE-2011-5055 · published 8 January 2012

CVE-2011-5055: Maradns improper input validation vulnerability

Maradns · Maradns

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set. NOTE: this issue exists because of an incomplete fix for CVE-2012-0024.

5.0 CVSS 2.0 Medium EPSS 1.4% · top 27.7% CWE-20 · Improper input validation
5.0CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set. NOTE: this issue exists because of an incomplete fix for CVE-2012-0024.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://openwall.com/lists/oss-security/2012/01/03/13
http://openwall.com/lists/oss-security/2012/01/03/6
http://samiam.org/blog/20111230.html Patch
https://bugzilla.redhat.com/show_bug.cgi?id=771428
http://openwall.com/lists/oss-security/2012/01/03/13
http://openwall.com/lists/oss-security/2012/01/03/6
http://samiam.org/blog/20111230.html Patch
https://bugzilla.redhat.com/show_bug.cgi?id=771428

Track CVE-2011-5055 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2012-0024Maradns uncontrolled resource consumption vulnerabilityMaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predict…EPSS 2.7%7.8CVE-2007-3115Maradns vulnerabilityMultiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (…EPSS 2.4%7.5CVE-2023-31137Maradns vulnerabilityMaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely exploitable integer underflow…EPSS 1.1%7.5CVE-2022-30256Maradns vulnerabilityAn issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can s…EPSS 0.96%7.5CVE-2011-0520Maradns memory buffer overflow vulnerabilityThe compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a d…EPSS 5.2%5.0CVE-2008-0061Maradns vulnerabilityMaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS pack…EPSS 2.1%5.0CVE-2007-3114Maradns vulnerabilityMemory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory co…EPSS 1.7%5.0CVE-2007-3116Maradns vulnerabilityMemory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspeci…EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2011-5055), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.