MaraDNS vulnerabilities

2023-08-0300:00:00

ubuntu.com

maradns

ubuntu

vulnerabilities

security

remote attacker

denial of service

cve-2022-30256

cve-2023-31137

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Releases

Ubuntu 23.04
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

maradns - A small open-source DNS server

Details

Xiang Li discovered that MaraDNS incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to obtain
sensitive information. (CVE-2022-30256)

Huascar Tejeda discovered that MaraDNS incorrectly handled certain inputs. If
a user or an automated system were tricked into opening a specially crafted
input file, a remote attacker could possibly use this issue to cause a denial
of service. (CVE-2023-31137)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchmaradns-zoneserver< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchduende< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchduende-dbgsym< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchmaradns< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchmaradns-dbgsym< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchmaradns-deadwood< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchmaradns-deadwood-dbgsym< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchmaradns-docs< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu23.04noarchmaradns-zoneserver-dbgsym< 2.0.13-1.4+deb11u1build0.23.04.1UNKNOWN
Ubuntu22.04noarchmaradns-zoneserver< 2.0.13-1.4+deb11u1build0.22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.04	noarch	maradns-zoneserver	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	duende	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	duende-dbgsym	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	maradns	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	maradns-dbgsym	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	maradns-deadwood	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	maradns-deadwood-dbgsym	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	maradns-docs	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	maradns-zoneserver-dbgsym	< 2.0.13-1.4+deb11u1build0.23.04.1	UNKNOWN
Ubuntu	22.04	noarch	maradns-zoneserver	< 2.0.13-1.4+deb11u1build0.22.04.1	UNKNOWN