CVE-2011-5056

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service (CPU consumption) via crafted records in zone files, a different vulnerability than CVE-2012-0024.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://samiam.org/blog/20111229.htmlPatch, Third Party Advisory
http://www.securitytracker.com/id?1026820Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72258Third Party Advisory, VDB Entry
http://samiam.org/blog/20111229.htmlPatch, Third Party Advisory
http://www.securitytracker.com/id?1026820Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72258Third Party Advisory, VDB Entry

Timeline

Published: Jan 8, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-50575.0Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the sessio CVE-2011-50586.4The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories und CVE-2011-505910.0Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, CVE-2011-50603.3The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without ver CVE-2011-50617.5functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty t CVE-2011-50625.0The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not CVE-2011-50634.3The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not CVE-2011-50644.3DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, an CVE-2011-50654.3Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arb CVE-2011-50662.1The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 does CVE-2011-50674.0move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the CVE-2011-50686.8Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the