Aller au contenu

Vulnérabilités de NLnet Labs NSD

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-101341 Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved… 8.7 Élevée 14 oct. 2026
CVE-2026-101339 A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous… 8.7 Élevée 14 oct. 2026
CVE-2026-101338 When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the… 8.7 Élevée 14 oct. 2026
CVE-2026-101337 When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes 8.7 Élevée 14 oct. 2026
CVE-2026-19538 The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed… 8.2 Élevée 26 août 2026
CVE-2026-19401 Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message… 8.2 Élevée 26 août 2026
CVE-2026-18916 Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query 6.9 Moyenne 26 août 2026
CVE-2026-18664 When ranges are used for access control (i.e 8.2 Élevée 26 août 2026
CVE-2026-12490 When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client… 8.2 Élevée 25 juin 2026
CVE-2026-12246 NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the… 7.2 Élevée 25 juin 2026
CVE-2026-12245 NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the… 8.7 Élevée 25 juin 2026
CVE-2026-12244 If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS… 8.7 Élevée 25 juin 2026
CVE-2020-28935 NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a… Non notée 7 déc. 2020

Autres produits NLnet Labs