PT-2021-30877

Name of the Vulnerable Software and Affected Versions Openssl version 0.9.8 Description The issue involves a heap out-of-bound read vulnerability in the rr frm str internal function and the ldns nsec3 salt data function. Additionally, there is a fixed time memory compare issue. Recommendations Fo...

PT-2019-6251 · Nlnet +6 · Ldns +6

Name of the Vulnerable Software and Affected Versions: ldns version 1.7.1 Description: The issue is related to the function ldns nsec3 salt data in the ldns library, which is too trusting of the length value obtained from a zone file. This can lead to a heap overflow and information leakage when...