CVE-2009-1086: Nlnetlabs Ldns

Medium severity, CVSS 6.4. EPSS: 3.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field.

Affected products

• Nlnetlabs Ldns: version 1.4.0 only; version 1.4.1 only

Published 2009-03-25. Last modified 2026-06-16.