nlnetlabs ldns 1.4.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:nlnetlabs:ldns:1.4.1:*:*:*:*:*:*:*

part: a version: 1.4.1 update: *

VendorNlnetlabs (8b1a4e66-a9d8-56c4-ab0e-8a1df5313bb8)
ProductLdns (3993d0bc-f788-581a-95d1-e482408af6ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ldns purl2cpe 2026-06-01 10:16:51.902344
pkg:deb/ubuntu/ldns purl2cpe 2026-06-01 10:16:51.902346
pkg:github/nlnetlabs/ldns purl2cpe 2026-06-01 10:16:51.902348
pkg:rpm/centos/ldns purl2cpe 2026-06-01 10:16:51.902349
pkg:rpm/fedora/ldns purl2cpe 2026-06-01 10:16:51.902351
pkg:rpm/opensuse/ldns purl2cpe 2026-06-01 10:16:51.902352

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3581 vulnerable 2026-06-08 04:59:26.448354 Details available
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
Published: 2011-11-04T21:00:00.000Z
Updated: 2024-08-06T23:37:48.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1086 vulnerable 2026-06-08 04:51:12.966951 Details available
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field.
Published: 2009-03-25T18:00:00.000Z
Updated: 2024-08-07T04:57:17.916Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.