CVE-2012-1570: Maradns

Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days.

The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.

Affected products

• Maradns Maradns: before 1.3.07.15 (fixed in 1.3.07.15); from 1.4.0, before 1.4.12 (fixed in 1.4.12)

Published 2012-03-28. Last modified 2026-06-16.