Summary
It was discovered that ldns incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2020-19860, CVE-2020-19861)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | ldns | 1.7.0-3ubuntu4.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ldns | 1.6.17-8ubuntu0.1+esm1 |
Vulnerabilities 2
-
Unscored —
When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read v…
-
Unscored —
When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtaine…