CVE-2017-1000232
CriticalSummary
CVE-2017-1000232 describes a double-free vulnerability in str2host.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.
Risk Assessment
Double-free vulnerabilities can lead to unpredictable application behavior, posing risks to system stability and security.
Recommendation
It is recommended to update the ldns library to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in ldns 1.7.0
See all- CVE-2017-1000231Critical
CVE-2017-1000231 describes a double-free vulnerability in parse.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.
- CVE-2026-10846High
A vulnerability in the ldns library (versions 1.2.0 to 1.9.0) used as a UDP resolver lacks verification of the response source address and port, as well as the query ID and question. This enables off-path DNS cache poisoning attacks.
Original NVD description (English source)
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.