CVE-2010-2444: Maradns

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

parse/Csv2_parse.c in MaraDNS 1.3.03, and other versions before 1.4.03, does not properly handle hostnames that do not end in a "." (dot) character, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted csv2 zone file.

Affected products

• Maradns Maradns: version 1.3.03 only; version 1.3.04 only; version 1.3.05 only; version 1.3.06 only; version 1.3.07.01 only; version 1.3.07.02 only; …

Published 2010-06-25. Last modified 2026-06-16.