Description
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ldns | 1.6.11-1 | — |
| Debian 13 | ldns | 1.6.11-1 | — |
| Debian 12 | ldns | 1.6.11-1 | — |
| Debian 6.0 | ldns | 1.6.6-2+squeeze1 | DSA-2353-1 |
| Debian 5.0 | ldns | 1.4.0-1+lenny2 | DSA-2353-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | ldns | 1.6.17-5.7 | openSUSE-SU-2024:10556-1 |
Advisories 2
- DSA-2353-1 ldns - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10556-1 ldns-1.6.17-5.7 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- 46476 third-party-advisory
- 49748 vdb-entry
- [oss-security] 20110930 Re: CVE request: heap-based buffer overflow in ldns mailing-list
- 46470 third-party-advisory
- [oss-security] 20110924 CVE request: heap-based buffer overflow in ldns mailing-list
- FEDORA-2011-13929 vendor-advisory
- http://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=403
- FEDORA-2011-13915 vendor-advisory
- FEDORA-2011-13895 vendor-advisory
- http://nlnetlabs.nl/svn/ldns/tags/release-1.6.11/Changelog
- openSUSE-SU-2011:1161 vendor-advisory