Double-Free Vulnerability in ldns Affects Multiple Vendors
CVE-2017-1000231

9.8CRITICAL

Key Information:

Vendor

Nlnetlabs

Status
Ldns
Vendor
CVE Published:
17 November 2017

What is CVE-2017-1000231?

A double-free vulnerability has been identified in the parse.c component of ldns version 1.7.0. This flaw allows for the potential exploitation through unspecified attack vectors, which may compromise system integrity and lead to unexpected behavior. Users of ldns should apply the recommended security updates to mitigate the risks associated with this vulnerability.

References

https://lists.debian.org/debian-lts-announce/2017/11/msg0...
mailing-listx_refsource_MLIST
https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1256
x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2020...
vendor-advisoryx_refsource_SUSE

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.