Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: NLnet Labs NSD 4.15.1 Clear all filters
TI-2026-15894 CVE-2026-19538 · GHSA-q27j-h4qm-x5f7

Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS

Priority LOW 36

The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept ope…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0044 Published 2026-08-26 Fixed in 4.15.1 CWE-290
TI-2026-15825 CVE-2026-19401 · GHSA-v29p-5fvf-m7p8

Remote UDP DoS by sending multiple DNS Cookie options

Priority LOW 36

Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 when UDP payload size is 512).

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0046 Published 2026-08-26 Fixed in 4.15.1 CWE-400
TI-2026-15468 CVE-2026-18916 · GHSA-m6mr-q7j3-3rc6

Remote TCP DoS by throttling the TCP receive window

Priority LOW 37

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0046 Published 2026-08-26 Fixed in 4.15.1 CWE-191
TI-2026-15293 CVE-2026-18664 · GHSA-fw9f-54cp-j7fc

Wrong interpretation of ACL ranges

Priority LOW 36

When ranges are used for access control (i.e.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00437 Published 2026-08-26 Fixed in 4.15.1 CWE-284