When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone file payload.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/pokerfacett/MY_CVE_CREDIT