Ldns
Vendor:
First CVE: Mar 25, 2009 · Active for 17 years
8
Total CVEs
More Total CVEs than 87% of tracked products
1.3
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ldns over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 25, 2009
17 years ago
Most Recent CVE
Jun 10, 2026
48 days ago
CVE Severity & Scoring
Ldns8 CVEs
13%
38%
25%
25%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network5 (62.5%)
Unknown3 (37.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (62.5%)
High0 (0.0%)
Unknown3 (37.5%)
User Interaction
None4 (50.0%)
Unknown3 (37.5%)
Required1 (12.5%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None5 (62.5%)
Unknown3 (37.5%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-10846HIGH NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the resp | Jun 10, 2026 | 7.5 | 33 | NO | NO |
CVE-2017-1000231CRITICAL A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. | Nov 17, 2017 | 9.8 | 31 | NO | NO |
CVE-2017-1000232CRITICAL A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. | Nov 17, 2017 | 9.8 | 29 | NO | NO |
CVE-2020-19861HIGH When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - l | Jan 21, 2022 | 7.5 | 25 | NO | NO |
CVE-2011-3581MEDIUM Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbi | Nov 4, 2011 | 6.8 | 24 | NO | NO |
CVE-2020-19860MEDIUM When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by | Jan 21, 2022 | 6.5 | 23 | NO | NO |
CVE-2009-1086MEDIUM Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute | Mar 25, 2009 | 6.4 | 18 | NO | NO |
The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file. | Nov 16, 2014 | 2.1 | 11 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Ldns
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.7.1 | 2 | 7.0 | 1.4% | 0 | 0 |
| 1.7.0 | 2 | 9.8 | 2.5% | 0 | 0 |
| 1.6.9 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.8 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.7 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.6 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.5 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.4 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.3 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.2 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.11 | 1 | 2.1 | 0.4% | 0 | 0 |
| 1.6.10 | 1 | 2.1 | 0.4% | 0 | 0 |
| 1.6.1 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.6.0 | 2 | 4.5 | 2.2% | 0 | 0 |
| 1.5.1 | 1 | 6.8 | 4.1% | 0 | 0 |
| 1.5.0 | 1 | 6.8 | 4.1% | 0 | 0 |
| 1.4.1 | 2 | 6.6 | 3.8% | 0 | 0 |
| 1.4.0 | 2 | 6.6 | 3.8% | 0 | 0 |
| 1.3 | 1 | 6.8 | 4.1% | 0 | 0 |
| 1.2.2 | 1 | 6.8 | 4.1% | 0 | 0 |