CVE-2011-3581 Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Res...
MediumCVSS 6.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ldns(Debian:12) | < 1.6.11-1 | 1.6.11-1 |
| debian/ldns(Debian:13) | < 1.6.11-1 | 1.6.11-1 |
| debian/ldns(Debian:14) | < 1.6.11-1 | 1.6.11-1 |
| nlnetlabs ldns | <= 1.6.10 | No fix listed |
| nlnetlabs ldns | = 0.50 | No fix listed |
| nlnetlabs ldns | = 0.60 | No fix listed |
| nlnetlabs ldns | = 0.65 | No fix listed |
| nlnetlabs ldns | = 0.66 | No fix listed |
| nlnetlabs ldns | = 0.70 | No fix listed |
| nlnetlabs ldns | = 1.0.0 | No fix listed |
| nlnetlabs ldns | = 1.1.0 | No fix listed |
| nlnetlabs ldns | = 1.2.0 | No fix listed |
| nlnetlabs ldns | = 1.2.1 | No fix listed |
| nlnetlabs ldns | = 1.2.2 | No fix listed |
| nlnetlabs ldns | = 1.3 | No fix listed |
| nlnetlabs ldns | = 1.4.0 | No fix listed |
| nlnetlabs ldns | = 1.4.1 | No fix listed |
| nlnetlabs ldns | = 1.5.0 | No fix listed |
| nlnetlabs ldns | = 1.5.1 | No fix listed |
| nlnetlabs ldns | = 1.6.0 | No fix listed |
| nlnetlabs ldns | = 1.6.1 | No fix listed |
| nlnetlabs ldns | = 1.6.2 | No fix listed |
| nlnetlabs ldns | = 1.6.3 | No fix listed |
| nlnetlabs ldns | = 1.6.4 | No fix listed |
| nlnetlabs ldns | = 1.6.5 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nlnetlabs ldns | = 1.6.6 | No fix listed |
| nlnetlabs ldns | = 1.6.7 | No fix listed |
| nlnetlabs ldns | = 1.6.8 | No fix listed |
| nlnetlabs ldns | = 1.6.9 | No fix listed |
References
- Debian Security Tracker CVE-2011-3581 vendor-advisory
- FEDORA-2011-13895 vendor-advisory
- FEDORA-2011-13915 vendor-advisory
- FEDORA-2011-13929 vendor-advisory
- openSUSE-SU-2011:1161 vendor-advisory
- nlnetlabs.nl
- [oss-security] 20110924 CVE request: heap-based buffer overflow in ldns mailing-list
- [oss-security] 20110930 Re: CVE request: heap-based buffer overflow in ldns mailing-list
- 46470 third-party-advisory vendor-advisory
- 46476 third-party-advisory vendor-advisory
- www.nlnetlabs.nl
- 49748 vdb-entry
- bugs.debian.org issue-tracking