PT-2011-5212 · Nlnet · Ldns
Publicado
1970-01-01
·
Atualizado
2024-06-15
·
CVE-2011-3581
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ldns versions prior to 1.6.11
Description
The issue is related to a heap-based buffer overflow in the
ldns rr new frm str internal function, which can be exploited by remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length. The vulnerability can lead to a disruption of confidentiality, integrity, and availability of protected information and can be exploited remotely.Recommendations
For versions prior to 1.6.11, update to version 1.6.11 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
ldns rr new frm str internal function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using input that is longer than a specified length in the affected Resource Record (RR) until the issue is resolved.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ldns