DSA-1795 ldns -- buffer overflowID: oval:org.mitre.oval:def:7542 | Date: (C)2009-12-15 (M)2021-06-02 |
Class: PATCH | Family: unix |
Stefan Kaltenbrunner discovered that ldns, a library and set of utilities to facilitate DNS programming, did not correctly implement a buffer boundary check in its RR DNS record parser. This weakness could enable overflow of a heap buffer if a maliciously-crafted record is parsed, potentially allowing the execution of arbitrary code. The scope of compromise will vary with the context in which ldns is used, and could present either a local or remote attack vector. The old stable distribution (etch) is not affected by this issue.