← Vulnerability feed

Vulnerability record · CVE-2012-0024 · published 8 January 2012

CVE-2012-0024: Maradns uncontrolled resource consumption vulnerability

Maradns · Maradns

MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set.

7.8 CVSS 2.0 High EPSS 2.7% · top 14.5% CWE-400 · Uncontrolled resource consumption
7.8CVSS 2.0 base score
2.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted queries with the Recursion Desired (RD) bit set.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://openwall.com/lists/oss-security/2012/01/03/13 Mailing ListThird Party Advisory
http://openwall.com/lists/oss-security/2012/01/03/6 Mailing ListThird Party Advisory
http://samiam.org/blog/20111229.html PatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=771428 Issue TrackingThird Party Advisory
http://openwall.com/lists/oss-security/2012/01/03/13 Mailing ListThird Party Advisory
http://openwall.com/lists/oss-security/2012/01/03/6 Mailing ListThird Party Advisory
http://samiam.org/blog/20111229.html PatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=771428 Issue TrackingThird Party Advisory

Track CVE-2012-0024 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2007-3115Maradns vulnerabilityMultiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service (…EPSS 2.4%7.5CVE-2023-31137Maradns vulnerabilityMaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely exploitable integer underflow…EPSS 1.1%7.5CVE-2022-30256Maradns vulnerabilityAn issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain name can s…EPSS 0.96%7.5CVE-2011-0520Maradns memory buffer overflow vulnerabilityThe compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to cause a d…EPSS 5.2%5.0CVE-2011-5055Maradns improper input validation vulnerabilityMaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which…EPSS 1.4%5.0CVE-2008-0061Maradns vulnerabilityMaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS pack…EPSS 2.1%5.0CVE-2007-3114Maradns vulnerabilityMemory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory co…EPSS 1.7%5.0CVE-2007-3116Maradns vulnerabilityMemory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspeci…EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2012-0024), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.