CVE-2011-0520

🗓️ 28 Jan 2011 15:00:00Reported by redhatType

The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03 & 1.4.05 allows remote attackers to cause a denial of service (segmentation fault) & possibly execute arbitrary code via a long DNS hostname with a large number of labels, triggering a heap-based buffer overflow

Reporter	Title	Published	Views	Family All 22
FreeBSD	maradns -- denial of service when resolving a long DNS hostname	23 Jan 201100:00	–	freebsd
Cvelist	CVE-2011-0520	28 Jan 201115:00	–	cvelist
Debian	[SECURITY] [DSA 2196-1] maradns security update	19 Mar 201123:50	–	debian
Debian CVE	CVE-2011-0520	28 Jan 201115:00	–	debiancve
Tenable Nessus	Debian DSA-2196-1 : maradns - buffer overflow	21 Mar 201100:00	–	nessus
Tenable Nessus	FreeBSD : maradns -- denial of service when resolving a long DNS hostname (8015600f-2c80-11e0-9cc1-00163e5bf4f9)	1 Feb 201100:00	–	nessus
Tenable Nessus	GLSA-201111-06 : MaraDNS: Arbitrary code execution	22 Nov 201100:00	–	nessus
Tenable Nessus	MaraDNS < 1.3.07.11 / 1.4.x < 1.4.06 / 2.0.x < 2.0.02 compress_add_dlabel_points Function Buffer Overflow	11 Apr 201400:00	–	nessus
EUVD	EUVD-2011-0540	7 Oct 202500:30	–	euvd
Gentoo Linux	MaraDNS: Arbitrary code execution	20 Nov 201100:00	–	gentoo

NVD

Node

maradns maradnsMatch1.4.03

maradns maradnsMatch1.4.05

Source	Link
openwall	www.openwall.com/lists/oss-security/2011/01/24/1
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/64885
secunia	www.secunia.com/advisories/43107
vupen	www.vupen.com/english/advisories/2011/0699
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
debian	www.debian.org/security/2011/dsa-2196
osvdb	www.osvdb.org/70630
securityfocus	www.securityfocus.com/bid/45966
secunia	www.secunia.com/advisories/43027
openwall	www.openwall.com/lists/oss-security/2011/01/24/6

29 Apr 2026 01:13Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

EPSS0.06246

CWE-119