Skip to content
OpenAdvisories
Unscored USN-5257-2 2 CVEs

ldns vulnerabilities

Published Oct 4, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

USN-5257-1 fixed several vulnerabilities in ldns. This update provides
the corresponding update for Ubuntu 20.04 ESM and Ubuntu 22.04 ESM.

Original advisory details:

It was discovered that ldns incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2020-19860, CVE-2020-19861)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS ldns 1.7.0-4.1ubuntu1+esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS ldns 1.7.1-2ubuntu4+esm1

Vulnerabilities 2

  • Unscored —
    CVE-2020-19860

    When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read v…

    ldns ldns Debian Ubuntu
  • Unscored —
    CVE-2020-19861

    When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtaine…

    ldns ldns Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-19860
  • report
    https://ubuntu.com/security/CVE-2020-19861