CVE-2020-19861

CVE-2020-19861 describes a heap overflow vulnerability in ldns 1.7.1, specifically within the ldns_nsec3_salt_data function during zone file parsing. This flaw allows an attacker to cause information leakage by crafting a malicious zone file that leads to an overly trusted length value during a memcpy operation. Rated 7.5 HIGH on CVSS, this vulnerability is network-exploitable with low attack complexity, requiring no user interaction or privileges, and primarily impacts confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.