Approved changes feed: RSS · Atom

cpe:2.3:a:libtins:libtins:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibtins (9d3bfe35-cb24-596e-b694-43e4b0813016)
ProductLibtins (94cb0754-b1d3-5695-8f8b-8edcf073cd82)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-112273 vulnerable 2026-11-03 10:16:28.880076 libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name
MEDIUM (5.3)
libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority records trigger a one-byte read when parsed, crashing applications on hardened allocators.
Published: 2026-10-19T13:55:20.684Z
Updated: 2026-10-22T02:51:25.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-112274 vulnerable 2026-11-03 10:16:28.418378 libtins through 4.6 Out-of-Bounds Read via DNS::soa_record::init
LOW (3.7)
libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causing strlen to overrun the heap buffer and possibly crash.
Published: 2026-10-19T13:55:21.345Z
Updated: 2026-10-19T17:57:12.363Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.