A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ldns | Aug 22, 2024 | Nov 17, 2017 |
| Debian | — | Upgrade ldns | Feb 7, 2022 | Nov 17, 2017 |
| Suse | — | Upgrade libldns2Upgrade python3-ldnsUpgrade perl-DNS-LDNSUpgrade ldnsUpgrade ldns-devel | Apr 2, 2020 | Nov 16, 2017 |
| Ubuntu | — | Upgrade libldns1Upgrade libldns2 | Nov 23, 2017 | Nov 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub