Описание
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ldns | fixed | 1.7.0-4 | package | |
| ldns | no-dsa | jessie | package | |
| ldns | not-affected | wheezy | package |
Примечания
https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1257
https://github.com/NLnetLabs/ldns/commit/3bdeed02505c9bbacb3b64a97ddcb1de967153b7
EPSS
Процентиль: 65%
0.00494
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 8 лет назад
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
CVSS3: 5.9
redhat
больше 8 лет назад
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
CVSS3: 9.8
nvd
почти 8 лет назад
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
CVSS3: 9.8
github
больше 3 лет назад
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
EPSS
Процентиль: 65%
0.00494
Низкий