rpm package
suse/ldns&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3
pkg:rpm/suse/ldns&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-19861 | — | < 1.7.0-4.6.1 | 1.7.0-4.6.1 | Jan 21, 2022 | When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage. | ||
| CVE-2020-19860 | — | < 1.7.0-4.6.1 | 1.7.0-4.6.1 | Jan 21, 2022 | When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload. |
- CVE-2020-19861Jan 21, 2022affected < 1.7.0-4.6.1fixed 1.7.0-4.6.1
When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage.
- CVE-2020-19860Jan 21, 2022affected < 1.7.0-4.6.1fixed 1.7.0-4.6.1
When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload.