tocsin

Debian/ldns: high 7.5

When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rd

Action: Upgrade ldns to 1.8.1-1 or later.

Affected

introducedfixedlast affected
01.8.1-1-

Fixed versions

1.8.1-1

Sources

published · modified · JSON