All packages
ldns 1.7.0 vulnerabilities
3 known CVE vulnerabilities in ldns 1.7.0, translated and rated.
- CVE-2017-1000232Critical
CVE-2017-1000232 describes a double-free vulnerability in str2host.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.
- CVE-2017-1000231Critical
CVE-2017-1000231 describes a double-free vulnerability in parse.c in version 1.7.0 of the ldns library. The impact and attack vectors are unspecified.
- CVE-2026-10846High
A vulnerability in the ldns library (versions 1.2.0 to 1.9.0) used as a UDP resolver lacks verification of the response source address and port, as well as the query ID and question. This enables off-path DNS cache poisoning attacks.