Heap-based Buffer Overflow in LDNS by NLnet Labs
CVE-2011-3581

Currently unrated

Key Information:

Vendor: Nlnetlabs
Status: Ldns
Vendor: CVE Published:; 4 November 2011

What is CVE-2011-3581?

A heap-based buffer overflow vulnerability exists in the ldns_rr_new_frm_str_internal function of LDNS prior to version 1.6.11. This flaw allows remote attackers to craft a Resource Record (RR) with an oversized input, potentially leading to a denial of service through application crashes and, in some conditions, the execution of arbitrary code.

References

http://secunia.com/advisories/46476

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/bid/49748

vdb-entryx_refsource_BID

http://seclists.org/oss-sec/2011/q3/542

mailing-listx_refsource_MLIST

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 4, 2011
Vulnerability Reserved
Sep 21, 2011

CVE-2011-3581 Data

JSON

Nlnetlabs

What is CVE-2011-3581?

References

Timeline