Approved changes feed: RSS · Atom

cpe:2.3:a:nlnetlabs:ldns:1.6.0:*:*:*:*:*:*:*

part: a version: 1.6.0 update: *

VendorNlnetlabs (8b1a4e66-a9d8-56c4-ab0e-8a1df5313bb8)
ProductLdns (3993d0bc-f788-581a-95d1-e482408af6ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ldns purl2cpe 2026-06-01 10:16:51.902374
pkg:deb/ubuntu/ldns purl2cpe 2026-06-01 10:16:51.902375
pkg:github/nlnetlabs/ldns purl2cpe 2026-06-01 10:16:51.902377
pkg:rpm/centos/ldns purl2cpe 2026-06-01 10:16:51.902379
pkg:rpm/fedora/ldns purl2cpe 2026-06-01 10:16:51.902380
pkg:rpm/opensuse/ldns purl2cpe 2026-06-01 10:16:51.902382

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3209 vulnerable 2026-06-08 05:05:31.881037 Details available
The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.
Published: 2014-11-16T01:00:00.000Z
Updated: 2024-08-06T10:35:56.989Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3581 vulnerable 2026-06-08 04:59:26.450064 Details available
Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
Published: 2011-11-04T21:00:00.000Z
Updated: 2024-08-06T23:37:48.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.