Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: NLNETLABS Component: Nsd Clear all filters
TI-2026-15894 CVE-2026-19538 · GHSA-q27j-h4qm-x5f7

Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS

Priority LOW 36

The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept ope…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0044 Published 2026-08-26 Fixed in 4.15.1 CWE-290
TI-2026-15825 CVE-2026-19401 · GHSA-v29p-5fvf-m7p8

Remote UDP DoS by sending multiple DNS Cookie options

Priority LOW 36

Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 when UDP payload size is 512).

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0046 Published 2026-08-26 Fixed in 4.15.1 CWE-400
TI-2026-15468 CVE-2026-18916 · GHSA-m6mr-q7j3-3rc6

Remote TCP DoS by throttling the TCP receive window

Priority LOW 37

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0046 Published 2026-08-26 Fixed in 4.15.1 CWE-191
TI-2026-15293 CVE-2026-18664 · GHSA-fw9f-54cp-j7fc

Wrong interpretation of ACL ranges

Priority LOW 36

When ranges are used for access control (i.e.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00437 Published 2026-08-26 Fixed in 4.15.1 CWE-284
TI-2026-10722 CVE-2026-12490 · GHSA-27xx-c7vg-hjjj

Bypass of client certificate verification with transfer over TLS

Priority LOW 35

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00216 Published 2026-06-25 Fixed in 4.14.3 CWE-284
TI-2026-10533 CVE-2026-12246 · GHSA-xgm5-85mh-3559

Out of bounds stack write with crafted APL RR

Priority LOW 32

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attack…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00444 Published 2026-06-25 Fixed in 4.14.3 CWE-120
TI-2026-10532 CVE-2026-12245 · GHSA-rcp9-2p4r-m2hm

Denial of DNS over TLS service by any DoT client

Priority MEDIUM 44

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closin…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0046 Published 2026-06-25 Fixed in 4.14.3 CWE-416
TI-2026-10531 CVE-2026-12244 · GHSA-p22w-wq6p-g85g

Heap overflow and crash with crafted SVCB RR

Priority MEDIUM 40

If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted SVCB RR with an rdata size of 65512, that let's an (uint16_t) variable tha…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00487 Published 2026-06-25 Fixed in 4.14.3 CWE-122
TI-2009-01670 CVE-2009-1755 · GHSA-hvfw-j69f-c8f3

Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and…

Priority LOW 29

Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute ar…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03157 Published 2009-05-22 No fix listed CWE-189