Nlnetlabs Ldns
8 CVEs affecting Nlnetlabs Ldns. Latest disclosed: 2026-06-10. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000232 | Critical | 9.8 | 2017-11-17 | A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. |
CVE-2017-1000231 | Critical | 9.8 | 2017-11-17 | A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. |
CVE-2026-10846 | High | 7.5 | 2026-06-10 | NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address a… |
CVE-2020-19861 | High | 7.5 | 2022-01-21 | When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is… |
CVE-2020-19860 | Medium | 6.5 | 2022-01-21 | When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak infor… |
CVE-2014-3209 | | 2014-11-16 | The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by… | |
CVE-2011-3581 | | 2011-11-04 | Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and… | |
CVE-2009-1086 | | 2009-03-25 | Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption)… |