Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1086
HistoryMar 25, 2009 - 12:00 a.m.

CVE-2009-1086

2009-03-2500:00:00
ubuntu.com
ubuntu.com
6

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.112 Low

EPSS

Percentile

95.2%

Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in
ldns 1.4.x allows remote attackers to cause a denial of service (memory
corruption) and possibly execute arbitrary code via a DNS resource record
(RR) with a long (1) class field (clas variable) and possibly (2) TTL
field.

OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchldns< 1.4.0-1+lenny1build0.9.04.1UNKNOWN

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.112 Low

EPSS

Percentile

95.2%