Advisory ROSA-SA-2024-2476

software: ldns 1.8.3
OS: ROSA-CHROME

package_evr_string: ldns-1.8.3-1

CVE-ID: CVE-2020-19861
BDU-ID: 2022-05917
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the ldns_nsec3_salt_data function of the DNS LDNS library is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability allows an attacker acting remotely to gain access to sensitive data
CVE-STATUS: Resolved
CVE-REV: To close, run the command: sudo dnf update ldns

CVE-ID: CVE-2020-19860
BDU-ID: 2022-05877
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the ldns_rrr_new_frm_str_internal function of the DNS LDNS library is related to a read outside the allowed data buffer boundaries. Exploitation of the vulnerability allows an attacker acting remotely to gain access to sensitive data
CVE-STATUS: Resolved
CVE-REV: To close, run the command: sudo dnf update ldns