| CVE-2026-101341 |
Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved…
|
8.7
High
|
Oct 14, 2026 |
| CVE-2026-101339 |
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous…
|
8.7
High
|
Oct 14, 2026 |
| CVE-2026-101338 |
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the…
|
8.7
High
|
Oct 14, 2026 |
| CVE-2026-101337 |
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes
|
8.7
High
|
Oct 14, 2026 |
| CVE-2026-19538 |
The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed…
|
8.2
High
|
Aug 26, 2026 |
| CVE-2026-19401 |
Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message…
|
8.2
High
|
Aug 26, 2026 |
| CVE-2026-18916 |
Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query
|
6.9
Medium
|
Aug 26, 2026 |
| CVE-2026-18664 |
When ranges are used for access control (i.e
|
8.2
High
|
Aug 26, 2026 |
| CVE-2026-12490 |
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client…
|
8.2
High
|
Jun 25, 2026 |
| CVE-2026-12246 |
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the…
|
7.2
High
|
Jun 25, 2026 |
| CVE-2026-12245 |
NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the…
|
8.7
High
|
Jun 25, 2026 |
| CVE-2026-12244 |
If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS…
|
8.7
High
|
Jun 25, 2026 |
| CVE-2020-28935 |
NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a…
|
Not rated
|
Dec 7, 2020 |