CVE-2011-3581: Nlnetlabs Ldns

Medium severity, CVSS 6.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.

Affected products

• Nlnetlabs Ldns: up to and including 1.6.10; version 0.50 only; version 0.60 only; version 0.65 only; version 0.66 only; version 0.70 only; …

Published 2011-11-04. Last modified 2026-06-16.