VULNERABILITY INTELLIGENCE

CVE-2011-3581

CVSS score6.8 MEDIUM

EPSS probability4.11%

CISA KEVNot currently listed

Published2011-11-04

Last modified2026-06-16

Description

Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.