https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:12:10 +0000 https://db.gcve.eu/vuln/cve-2014-3209 <p>The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.</p> <p>The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.</p> https://db.gcve.eu/vuln/cve-2014-3209 https://db.gcve.eu/vuln/usn-3491-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ldns, Ubuntu:16.04:LTS: ldns</p> <p>Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue to obtain generated private keys. This issue only applied to Ubuntu 14.04 LTS. (CVE-2014-3209)</p> <p>Stephan Zeisberg discovered that ldns incorrectly handled memory when processing data. A remote attacker could use this issue to cause ldns to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-1000231, CVE-2017-1000232)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ldns, Ubuntu:16.04:LTS: ldns</p> <p>Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue to obtain generated private keys. This issue only applied to Ubuntu 14.04 LTS. (CVE-2014-3209)</p> <p>Stephan Zeisberg discovered that ldns incorrectly handled memory when processing data. A remote attacker could use this issue to cause ldns to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-1000231, CVE-2017-1000232)</p> https://db.gcve.eu/vuln/usn-3491-1