CVE-2020-19861 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-19861 Interim 1 38 2026-03-05T05:45:20Z current 2022-01-25T02:36:14Z 2026-03-05T05:45:20Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-19861 When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2022-March/010330.html E-Mail link for SUSE-SU-2022:0675-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4UGIOR5OPYQTAQRTVNXBBH25LGJ74XJJ/ E-Mail link for openSUSE-SU-2022:0675-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Leap 15.3 openSUSE Tumbleweed ldns ldns-1.7.0-4.6.1 ldns-1.8.1-1.1 ldns-1.8.4-160000.2.3 ldns-devel ldns-devel-1.7.0-4.6.1 ldns-devel-1.8.1-1.1 ldns-devel-1.8.3-150600.1.4 ldns-devel-1.8.4-160000.2.3 libldns2 libldns2-1.7.0-4.6.1 libldns3-1.8.1-1.1 libldns3-1.8.3-150600.1.4 libldns3-1.8.4-160000.2.3 perl-DNS-LDNS perl-DNS-LDNS-1.7.0-4.6.1 perl-DNS-LDNS-1.8.1-1.1 perl-DNS-LDNS-1.8.3-150600.1.4 perl-DNS-LDNS-1.8.4-160000.2.3 python3-ldns-1.7.0-4.6.1 python3-ldns-1.8.1-1.1 python3-ldns-1.8.4-160000.2.3 ldns-devel-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libldns2-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 ldns-devel-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libldns2-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ldns-devel-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libldns2-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 ldns-devel-1.8.3-150600.1.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libldns3-1.8.3-150600.1.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 ldns-devel-1.8.3-150600.1.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libldns3-1.8.3-150600.1.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 perl-DNS-LDNS-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 perl-DNS-LDNS-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 perl-DNS-LDNS-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 perl-DNS-LDNS-1.8.3-150600.1.4 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 perl-DNS-LDNS-1.8.3-150600.1.4 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 ldns-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 ldns-devel-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 libldns2-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 perl-DNS-LDNS-1.7.0-4.6.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 ldns-1.8.4-160000.2.3 as a component of SUSE Linux Enterprise Server 16.0 ldns-devel-1.8.4-160000.2.3 as a component of SUSE Linux Enterprise Server 16.0 libldns3-1.8.4-160000.2.3 as a component of SUSE Linux Enterprise Server 16.0 perl-DNS-LDNS-1.8.4-160000.2.3 as a component of SUSE Linux Enterprise Server 16.0 python3-ldns-1.8.4-160000.2.3 as a component of SUSE Linux Enterprise Server 16.0 ldns-1.7.0-4.6.1 as a component of openSUSE Leap 15.3 ldns-devel-1.7.0-4.6.1 as a component of openSUSE Leap 15.3 libldns2-1.7.0-4.6.1 as a component of openSUSE Leap 15.3 perl-DNS-LDNS-1.7.0-4.6.1 as a component of openSUSE Leap 15.3 python3-ldns-1.7.0-4.6.1 as a component of openSUSE Leap 15.3 ldns-1.8.1-1.1 as a component of openSUSE Tumbleweed ldns-devel-1.8.1-1.1 as a component of openSUSE Tumbleweed libldns3-1.8.1-1.1 as a component of openSUSE Tumbleweed perl-DNS-LDNS-1.8.1-1.1 as a component of openSUSE Tumbleweed python3-ldns-1.8.1-1.1 as a component of openSUSE Tumbleweed ldns-devel as a component of SUSE CaaS Platform 4.0 libldns2 as a component of SUSE CaaS Platform 4.0 perl-DNS-LDNS as a component of SUSE CaaS Platform 4.0 ldns as a component of SUSE CaaS Platform 4.0 ldns as a component of SUSE Enterprise Storage 6 ldns as a component of SUSE Enterprise Storage 7 ldns-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libldns2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS perl-DNS-LDNS as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS ldns as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS ldns-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libldns2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS perl-DNS-LDNS as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS ldns as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS ldns-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libldns2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ldns as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 perl-DNS-LDNS as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 ldns as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 ldns-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libldns2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS perl-DNS-LDNS as a component of SUSE Linux Enterprise Server 15 SP1-LTSS ldns as a component of SUSE Linux Enterprise Server 15 SP1-LTSS ldns-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libldns2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS perl-DNS-LDNS as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ldns as a component of SUSE Linux Enterprise Server 15 SP2-LTSS ldns-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libldns2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 perl-DNS-LDNS as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 ldns as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 ldns-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libldns2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 perl-DNS-LDNS as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 ldns as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow information leakage. CVE-2020-19861 SUSE Linux Enterprise Module for Basesystem 15 SP3:ldns-devel-1.7.0-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libldns2-1.7.0-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:ldns-devel-1.7.0-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libldns2-1.7.0-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:ldns-devel-1.7.0-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libldns2-1.7.0-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:ldns-devel-1.8.3-150600.1.4 SUSE Linux Enterprise Module for Basesystem 15 SP6:libldns3-1.8.3-150600.1.4 SUSE Linux Enterprise Module for Basesystem 15 SP7:ldns-devel-1.8.3-150600.1.4 SUSE Linux Enterprise Module for Basesystem 15 SP7:libldns3-1.8.3-150600.1.4 SUSE Linux Enterprise Module for Development Tools 15 SP3:perl-DNS-LDNS-1.7.0-4.6.1 SUSE Linux Enterprise Module for Development Tools 15 SP4:perl-DNS-LDNS-1.7.0-4.6.1 SUSE Linux Enterprise Module for Development Tools 15 SP5:perl-DNS-LDNS-1.7.0-4.6.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:perl-DNS-LDNS-1.8.3-150600.1.4 SUSE Linux Enterprise Module for Development Tools 15 SP7:perl-DNS-LDNS-1.8.3-150600.1.4 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:ldns-1.7.0-4.6.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:python3-ldns-1.7.0-4.6.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:ldns-1.7.0-4.6.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:python3-ldns-1.7.0-4.6.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:libldns2-1.7.0-4.6.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:libldns2-1.7.0-4.6.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:ldns-1.7.0-4.6.1 SUSE Linux Enterprise Real Time 15 SP2:ldns-devel-1.7.0-4.6.1 SUSE Linux Enterprise Real Time 15 SP2:libldns2-1.7.0-4.6.1 SUSE Linux Enterprise Real Time 15 SP2:perl-DNS-LDNS-1.7.0-4.6.1 SUSE Linux Enterprise Server 16.0:ldns-1.8.4-160000.2.3 SUSE Linux Enterprise Server 16.0:ldns-devel-1.8.4-160000.2.3 SUSE Linux Enterprise Server 16.0:libldns3-1.8.4-160000.2.3 SUSE Linux Enterprise Server 16.0:perl-DNS-LDNS-1.8.4-160000.2.3 SUSE Linux Enterprise Server 16.0:python3-ldns-1.8.4-160000.2.3 openSUSE Leap 15.3:ldns-1.7.0-4.6.1 openSUSE Leap 15.3:ldns-devel-1.7.0-4.6.1 openSUSE Leap 15.3:libldns2-1.7.0-4.6.1 openSUSE Leap 15.3:perl-DNS-LDNS-1.7.0-4.6.1 openSUSE Leap 15.3:python3-ldns-1.7.0-4.6.1 openSUSE Tumbleweed:ldns-1.8.1-1.1 openSUSE Tumbleweed:ldns-devel-1.8.1-1.1 openSUSE Tumbleweed:libldns3-1.8.1-1.1 openSUSE Tumbleweed:perl-DNS-LDNS-1.8.1-1.1 openSUSE Tumbleweed:python3-ldns-1.8.1-1.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L