CVE-2009-1086
- State
- Published
- Severity
- Not scored
- Published
- Mar 25, 2009
- Updated
- Aug 7, 2024
- Reserved
- Mar 25, 2009
Description
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 35013third-party-advisory
- [oss-security] 20090324 CVE id request: ldnsmailing-list
- 34233vdb-entry
- http://www.nlnetlabs.nl/svn/ldns/tags/release-1.5.0/Changelog
- 35065third-party-advisory
- http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=232
- SUSE-SR:2009:010vendor-advisory
- DSA-1795vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.