Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: NLnet Labs NSD 4.14.3 Clear all filters
TI-2026-10722 CVE-2026-12490 · GHSA-27xx-c7vg-hjjj

Bypass of client certificate verification with transfer over TLS

Priority LOW 35

When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00216 Published 2026-06-25 Fixed in 4.14.3 CWE-284
TI-2026-10533 CVE-2026-12246 · GHSA-xgm5-85mh-3559

Out of bounds stack write with crafted APL RR

Priority LOW 32

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attack…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00444 Published 2026-06-25 Fixed in 4.14.3 CWE-120
TI-2026-10532 CVE-2026-12245 · GHSA-rcp9-2p4r-m2hm

Denial of DNS over TLS service by any DoT client

Priority MEDIUM 44

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closin…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0046 Published 2026-06-25 Fixed in 4.14.3 CWE-416
TI-2026-10531 CVE-2026-12244 · GHSA-p22w-wq6p-g85g

Heap overflow and crash with crafted SVCB RR

Priority MEDIUM 40

If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted SVCB RR with an rdata size of 65512, that let's an (uint16_t) variable tha…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00487 Published 2026-06-25 Fixed in 4.14.3 CWE-122