CVE-2014-2032

MEDIUM 5.9CVE-2014-2032 · Published 20/03/2018 · updated 17/06/2026

In short

CVE-2014-2032 is a MEDIUM (CVSS 5.9) vulnerability affecting deadwood (deadwood project), maradns (maradns project).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.8% of all vulnerabilities.
Fix: update to 3.2.05, 2.3.09, 2.0.09, 1.4.14 or later.

Package	Affected versions	Patched versions
deadwood deadwood_project	`≥ 3.0.01, < 3.2.05< 2.3.09`	`3.2.052.3.09`
maradns maradns_project	`≥ 2.0.05, < 2.0.09< 1.4.14`	`2.0.091.4.14`

Description

Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote attackers to cause a denial of service (out-of-bounds read and crash) by leveraging permission to perform recursive queries against Deadwood, related to missing input validation.

References

samiam.org/blog/2014-02-12.html · Patch
openwall.com/lists/oss-security/2014/02/19/15 · Mailing List
securityfocus.com/bid/65595 · Third Party Advisory
securitytracker.com/id/1029771 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/91204 · Third Party Advisory

More vulnerabilities in deadwood

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free