PT-2019-6794 · Opendnssec · Opendnssec

Alessandro Ghedini · Published 2019-11-25 · Updated 2019-12-09 · CVE-2012-5582

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions opendnssec (affected versions not specified)

Description The issue involves opendnssec misusing the libcurl API.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-5582

Affected Products

Opendnssec

References · 5

• https://security-tracker.debian.org/tracker/CVE-2012-5582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5582 · Security Note
• http://openwall.com/lists/oss-security/2012/11/29/6 · Note
• http://openwall.com/lists/oss-security/2012/11/28/12 · Note
• http://openwall.com/lists/oss-security/2012/11/29/3 · Note