329 matches found
Astra Linux – Vulnerability in ldns
NLnet Labs’ ldns version 1.2.0, including versions up to and including 1.9.0, when used as a stub resolver over UDP, fails to match the query destination address and port with the response source address and port. Moreover, neither the query ID nor the nature of the query matches that of the...
Rocky Linux 10.2 [CIQ] Security Update: ldns / ldns-debuginfo / ldns-debugsource / ldns-devel / ldns-doc / etc (crlsa-2026_49836)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649836 advisory. ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching CVE-2026-10846 Tenable has extracted the preceding description block directly...
Rocky Linux 9.2 [CIQ] Security Update: ldns / ldns-debuginfo / ldns-debugsource / ldns-devel / ldns-doc / etc Multiple Vulnerabilities (ciqsa-2026_1477)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261477 advisory. This advisory aggregates security fixes for the ldns SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2020-19860, CVE-2014-3209, CVE-2026-10846,...
Rocky Linux 9 [CIQ] Security Update: ldns / ldns-debuginfo / ldns-debugsource / ldns-devel / ldns-doc / etc (crlsa-2026_50108)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202650108 advisory. ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching CVE-2026-10846 Tenable has extracted the preceding description block directly fr...
Rocky Linux 8 [CIQ] Security Update: ldns / ldns-debuginfo / ldns-debugsource / ldns-devel / ldns-doc / etc (crlsa-2026_49520)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649520 advisory. ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching CVE-2026-10846 Tenable has extracted the preceding description block directly fr...
AlmaLinux 9.6 [TuxCare] Security Update: ldns / ldns-devel / ldns-doc / ldns-utils / perl-ldns / etc (ALMALINUX9.6:CLSA-2026:1784215324)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784215324 advisory. - NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as stub resolver over UDP, lacks matching the query...
Rocky Linux 9.6 [CIQ] Security Update: ldns / ldns-debuginfo / ldns-debugsource / ldns-devel / ldns-doc / etc Multiple Vulnerabilities (ciqsa-2026_1473)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261473 advisory. This advisory aggregates security fixes for the ldns SRPM in CIQ LTS 9.6. It addresses 4 CVEs: CVE-2020-19860, CVE-2014-3209, CVE-2026-10846,...
Rocky Linux 9.6 [TuxCare] Security Update: ldns / ldns-devel / ldns-doc / ldns-utils / perl-ldns / etc (ALMALINUX9.6:CLSA-2026:1784215324)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784215324 advisory. - NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as stub resolver over UDP, lacks matching the query...
AlmaLinux 9.2 [TuxCare] Security Update: ldns / ldns-devel / ldns-doc / ldns-utils / perl-ldns / etc (ALMALINUX9.2:CLSA-2026:1784986614)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784986614 advisory. - NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as stub resolver over UDP, lacks matching the query...
Astra Linux – Vulnerability in ldns
When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out-of-bounds read vulnerability. An attacker can leak information from the heap by constructing a zone file payload...
DNS LDNS Data Compromise Verification
The vulnerability of the DNS LDNS library is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
MiracleLinux 9 : ldns-1.7.1-12.el9_8.1 (AXSA:2026-1603:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1603:02 advisory. ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching CVE-2026-10846 Tenable has extracted the preceding description block...
RHSA-2026:54377 Red Hat Security Advisory: ldns security update
Bulletin has no description...
RHSA-2026:54254 Red Hat Security Advisory: ldns security update
Bulletin has no description...
ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching
A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol UDP, it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This...
Important: Red Hat Security Advisory: ldns security update
An update for ldns is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: ldns security update
An update for ldns is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching
A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol UDP, it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This...