Approved changes feed: RSS · Atom

cpe:2.3:a:nlnetlabs:ldns:1.6.4:*:*:*:*:*:*:*

part: a version: 1.6.4 update: *

VendorNlnetlabs (8b1a4e66-a9d8-56c4-ab0e-8a1df5313bb8)
ProductLdns (3993d0bc-f788-581a-95d1-e482408af6ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ldns purl2cpe 2026-06-01 10:16:51.902590
pkg:deb/ubuntu/ldns purl2cpe 2026-06-01 10:16:51.902591
pkg:github/nlnetlabs/ldns purl2cpe 2026-06-01 10:16:51.902593
pkg:rpm/centos/ldns purl2cpe 2026-06-01 10:16:51.902595
pkg:rpm/fedora/ldns purl2cpe 2026-06-01 10:16:51.902596
pkg:rpm/opensuse/ldns purl2cpe 2026-06-01 10:16:51.902598

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3209 vulnerable 2026-06-08 05:05:31.883136 Details available
The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.
Published: 2014-11-16T01:00:00.000Z
Updated: 2024-08-06T10:35:56.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3581 vulnerable 2026-06-08 04:59:26.452460 Details available
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
Published: 2011-11-04T21:00:00.000Z
Updated: 2024-08-06T23:37:48.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.