Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6291
HistoryMay 14, 2018 - 8:57 a.m.

Remote Code Execution (RCE)

2018-05-1408:57:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.004

Percentile

72.9%

libldns.so is vulnerable to remote code execution. A malicious user can pass a file to the ldns_fget_token_l in parse.c to cause a double-free, resulting in the application crashing or executing arbitrary code.