The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ldns | Aug 30, 2017 | Nov 15, 2014 |
| Debian | — | Upgrade ldns | Jul 30, 2024 | Nov 16, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2014 |
| Ubuntu | — | Upgrade libldns2Upgrade libldns1 | Nov 23, 2017 | Nov 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub