Candidate: CVE-2010-2444 PublicDate: 2010-06-25 18:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2444 Description: parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file. Ubuntu-Description: Notes: Bugs: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584587 Priority: medium Discovered-by: Assigned-to: CVSS: Patches_maradns: upstream: http://maradns.org/download/maradns-1.4.02-parse_segfault.patch upstream_maradns: released (1.4.03) dapper_maradns: ignored (reached end-of-life) hardy_maradns: ignored (reached end-of-life) jaunty_maradns: ignored (reached end-of-life) karmic_maradns: ignored (reached end-of-life) lucid_maradns: ignored (reached end-of-life) maverick_maradns: ignored (reached end-of-life) natty_maradns: not-affected (1.4.03-1) oneiric_maradns: not-affected (1.4.03-1) precise_maradns: not-affected (1.4.03-1) quantal_maradns: not-affected (1.4.03-1) raring_maradns: not-affected (1.4.03-1) saucy_maradns: not-affected (1.4.03-1) devel_maradns: not-affected (1.4.03-1)