CVE-2007-3114 - Vulnerability Details - OpenCVE

Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.01176.

Key SSVC decision points have not yet been added.

Vendors	Products
Maradns	Maradns

Configuration 1 [-]

OR	cpe:2.3:a:maradns:maradns:1.2.12.01:::::::*
	cpe:2.3:a:maradns:maradns:1.2.12.02:::::::*
	cpe:2.3:a:maradns:maradns:1.2.12.03:::::::*
	cpe:2.3:a:maradns:maradns:1.2.12.04:::::::*
	cpe:2.3:a:maradns:maradns:1.3.01:::::::*
	cpe:2.3:a:maradns:maradns:1.3.02:::::::*

No data.

No data.

Advisories

Source	ID	Title
Debian DSA	DSA-1319-1	New maradns packages fix denial of service
EUVD	EUVD-2007-3106	Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/37018
http://secunia.com/advisories/25406
http://secunia.com/advisories/25767
http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz
http://www.debian.org/security/2007/dsa-1319
http://www.maradns.org/changelog.html
http://www.securityfocus.com/bid/24337

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-06-07T21:00:00

Updated: 2024-08-07T14:05:29.206Z

Reserved: 2007-06-07T00:00:00

Link: CVE-2007-3114

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-06-07T21:30:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-3114

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-02-14T00:00:00", "descriptions": [{"lang": "en", "value": "Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2007-06-13T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "25406", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25406"}, {"name": "25767", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25767"}, {"name": "37018", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37018"}, {"name": "DSA-1319", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2007/dsa-1319"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.maradns.org/changelog.html"}, {"name": "24337", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24337"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-3114", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "25406", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25406"}, {"name": "25767", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25767"}, {"name": "37018", "refsource": "OSVDB", "url": "http://osvdb.org/37018"}, {"name": "DSA-1319", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2007/dsa-1319"}, {"name": "http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz", "refsource": "CONFIRM", "url": "http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz"}, {"name": "http://www.maradns.org/changelog.html", "refsource": "CONFIRM", "url": "http://www.maradns.org/changelog.html"}, {"name": "24337", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24337"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:05:29.206Z"}, "title": "CVE Program Container", "references": [{"name": "25406", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25406"}, {"name": "25767", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25767"}, {"name": "37018", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/37018"}, {"name": "DSA-1319", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2007/dsa-1319"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.maradns.org/changelog.html"}, {"name": "24337", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24337"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-3114", "datePublished": "2007-06-07T21:00:00", "dateReserved": "2007-06-07T00:00:00", "dateUpdated": "2024-08-07T14:05:29.206Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:maradns:maradns:1.2.12.01:*:*:*:*:*:*:*", "matchCriteriaId": "5C66798F-5DAF-414F-91A8-22CF33BABEF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:maradns:maradns:1.2.12.02:*:*:*:*:*:*:*", "matchCriteriaId": "7A22A70C-EF0B-4A82-BE88-0D32F4408073", "vulnerable": true}, {"criteria": "cpe:2.3:a:maradns:maradns:1.2.12.03:*:*:*:*:*:*:*", "matchCriteriaId": "35453D24-5C87-4723-8B10-AB9EF176AB15", "vulnerable": true}, {"criteria": "cpe:2.3:a:maradns:maradns:1.2.12.04:*:*:*:*:*:*:*", "matchCriteriaId": "97BC2590-19DC-478D-A800-8EB06280BF99", "vulnerable": true}, {"criteria": "cpe:2.3:a:maradns:maradns:1.3.01:*:*:*:*:*:*:*", "matchCriteriaId": "965A94F4-9DE1-4E76-A630-0BFA1B725708", "vulnerable": true}, {"criteria": "cpe:2.3:a:maradns:maradns:1.3.02:*:*:*:*:*:*:*", "matchCriteriaId": "5E7C14B5-830E-4234-9DE2-A4E9FA2B9DB7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116."}, {"lang": "es", "value": "Una p\u00e9rdida de memoria en el archivo server/MaraDNS.c en MaraDNS versiones anteriores a 1.2.12.05, y versiones 1.3.x anteriores a 1.3.03, permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de memoria) por medio de vectores no especificados, un conjunto de versiones afectadas diferentes de CVE-2007-3115 y CVE-2007-3116."}], "id": "CVE-2007-3114", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-06-07T21:30:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/37018"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/25406"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25767"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2007/dsa-1319"}, {"source": "cve@mitre.org", "url": "http://www.maradns.org/changelog.html"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/24337"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/37018"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/25406"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25767"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://superb-west.dl.sourceforge.net/sourceforge/maradns/maradns-1.2.12.05.tar.gz"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2007/dsa-1319"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.maradns.org/changelog.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/24337"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}