2 results (0.002 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

17 Nov 2017 — A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. Una vulnerabilidad de doble liberación (double free) en parse.c en ldns 1.7.0 provoca un impacto y origina vectores de ataque no especificados. Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue to obtain generated private keys. This issue only applied to Ubuntu 14.04 LTS. • http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html • CWE-415: Double Free •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

17 Nov 2017 — A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. Una vulnerabilidad de doble liberación (double free) en str2host.c en ldns 1.7.0 provoca un impacto y origina vectores de ataque no especificados. Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue to obtain generated private keys. This issue only applied to Ubuntu 14.04 LTS. • http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00000.html • CWE-415: Double Free •