CVE-2011-3581

Published Nov 4, 2011

Last updated 8 years ago

Overview

Description: Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0FAAE9A5-856A-4700-BDDF-068341148A24",
            "versionEndIncluding": "1.6.10"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:0.50:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8833B0F4-9810-4AB6-A15A-C5DB4E2A8CDE"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:0.60:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B738328F-A547-4EC2-B16E-4387A60068F1"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:0.65:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "112848BE-2A97-4501-AE12-A3335C0D8E46"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:0.66:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DF2715C8-63C4-43A5-AB38-3C682D5B36F6"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:0.70:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3D332B67-C682-4805-A027-4EE3D863E143"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D07AB479-B917-4E35-923E-26BA6892B638"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A0834861-0A50-4D6C-B3AE-4317125A12A3"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5C3C72D3-C619-4CD6-A262-B3A6D548755C"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "911F986F-F9F2-45F4-B2C1-7ECF8374DD9E"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77FD9D1D-AF2B-4D5E-8C0F-FCB246F67CF4"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E2EAB456-1640-4E2E-9CFF-D5621AE838ED"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7036E2A8-39EB-45D1-B0A5-80C35F737281"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B747B09-4C10-4F06-9E75-08C220ABED84"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1B3045A3-7790-465A-A2E1-4DD50887E1B9"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "442A3169-330A-4357-BA54-D025F965FFFD"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7F2C75EA-303D-4A6B-9D29-027F4113AC66"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D538E205-514C-4F3B-A321-6C12DFE818C6"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB72815C-BD06-4D00-A56A-55758ADC9422"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A734953E-97F4-4E59-BDEA-68B0F762C5D6"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9C11E750-99FB-4CF6-AE58-35BF90010C88"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "544526A4-1581-49C0-8725-369CEF426937"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F850CB5B-66A3-4DCD-AF3D-4EC4E99A3301"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F144E4B-73E6-456E-8FDE-57AB68A27CEE"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E343A1CE-D4C9-4A04-B5C6-604447CC22F4"
          },
          {
            "criteria": "cpe:2.3:a:nlnetlabs:ldns:1.6.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "166CA872-3BA7-41C4-909B-F556EF947866"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References