CVE Feed

    Dashboard / CVE / CVE-2014-3209

    CVE-2014-3209

    The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file.

    Published:May 3, 2014
    Last Modified:Apr 12, 2025
    EPS:Nov 16, 2014
    EPSS Score:0.00154
    CVSS Score:2.1

    Affected Products

    Vendor
    Nlnetlabs
    Product
    Ldns

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
    CAPEC-102 Session Sidejacking
    CAPEC-122 Privilege Abuse
    CAPEC-127 Directory Indexing
    CAPEC-17 Using Malicious Files
    CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
    CAPEC-206 Signing Malicious Code
    CAPEC-234 Hijacking a privileged process
    CAPEC-474 Signature Spoofing by Key Theft
    CAPEC-50 Password Recovery Exploitation
    CAPEC-509 Kerberoasting
    CAPEC-551 Modify Existing Service
    CAPEC-555 Remote Services with Stolen Credentials
    CAPEC-560 Use of Known Domain Credentials
    CAPEC-561 Windows Admin Shares with Stolen Credentials
    CAPEC-60 Reusing Session IDs (aka Session Replay)
    CAPEC-600 Credential Stuffing
    CAPEC-61 Session Fixation
    CAPEC-62 Cross Site Request Forgery
    CAPEC-642 Replace Binaries
    CAPEC-644 Use of Captured Hashes (Pass The Hash)
    CAPEC-645 Use of Captured Tickets (Pass The Ticket)
    CAPEC-652 Use of Known Kerberos Credentials
    CAPEC-653 Use of Known Operating System Credentials

    Related CVEs

    CVE-2026-10846 (CVSS 8.2) — NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UD…
    CVE-2020-19860 (CVSS 6.5) — When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of boun…
    CVE-2020-19861 (CVSS 7.5) — When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length valu…
    CVE-2017-1000232 (CVSS 9.8) — A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.…
    CVE-2017-1000231 (CVSS 9.8) — A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.…
    CVE-2011-3581 (CVSS 6.8) — Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote at…
    CVE-2009-1086 (CVSS 6.4) — Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High