UBUNTU-CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

[ MDVSA-2014:085 ] ldns

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:085 http://www.mandriva.com/en/support/security/ Package : ldns Date : May 12, 2014 Affected: Business Server 1.0 Problem Description: Updated ldns packages fix security vulnerability: ldns-keygen creates a...

ldns weak permissions

ldns-keygen can create world-readable private key file...

Mandriva Linux Security Advisory : ldns (MDVSA-2014:085)

Updated ldns packages fix security vulnerability : ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable CVE-2014-3209. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Updated ldns package fixes CVE-2014-3209

Updated ldns packages fix security vulnerability: ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable CVE-2014-3209...

MGASA-2014-0212 Updated ldns package fixes CVE-2014-3209

Updated ldns packages fix security vulnerability: ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable CVE-2014-3209...

GLSA-201401-25 : ldns: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-25 ldns: Arbitrary code execution ldns contains a heap-based buffer overflow in the ldnsrrnewfrmstrinternal function. Impact : A remote attacker could execute arbitrary code or cause a Denial of Service condition with a...

ldns: Arbitrary code execution

Background ldns is a fast DNS library with the goal to simplify DNS programming and to allow developers to easily create software conforming to current RFCs and Internet drafts. Description ldns contains a heap-based buffer overflow in the ldnsrrnewfrmstrinternal function. Impact A remote attacke...

Fedora Update for ldns FEDORA-2011-13895

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ldns FEDORA-2011-13895

Check for the Version of ldns OpenVAS Vulnerability Test Fedora Update for ldns FEDORA-2011-13895 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Debian: Security Advisory (DSA-2353-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2353-1 (ldns)

The remote host is missing an update to ldns announced via advisory DSA 2353-1. OpenVAS Vulnerability Test $Id: deb23531.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2353-1 ldns Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2353-1] ldns security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2353-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2011 http://www.debian.org/security/faq -...

Debian DSA-2353-1 : ldns - buffer overflow

David Wheeler discovered a buffer overflow in ldns's code to parse RR records, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2353. Th...

[SECURITY] [DSA 2353-1] ldns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2353-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2011 http://www.debian.org/security/faq -...

DSA-2353-1 ldns - buffer overflow

Bulletin has no description...

DEBIAN-CVE-2011-3581

Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns before 1.6.11 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Resource Record RR with an unknown type containing input that is longer than a specified length...

CVE-2011-3581

Heap-based buffer overflow in the ldnsrrnewfrmstrinternal function in ldns before 1.6.11 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Resource Record RR with an unknown type containing input that is longer than a specified length...