[ Vendor · 17 CVEs ]
NLnet Labs
CVEs affecting NLnet Labs published in the last 30 days, plus any NLnet Labs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96405 | 21 Oct 2026 | CVSS 5.3 | NLnet Labs UnboundNLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no… | |
| CVE-2026-97206 | 21 Oct 2026 | CVSS 7.5 | NLnet Labs UnboundNLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under… | |
| CVE-2026-35501 | 21 Oct 2026 | CVSS 3.7 | NLnet Labs UnboundWhen NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an… | |
| CVE-2026-50106 | 21 Oct 2026 | CVSS 6.5 | NLnet Labs UnboundWhen NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an… | |
| CVE-2026-109125 | 21 Oct 2026 | CVSS 5.3 | NLnet Labs UnboundIn NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0'… | |
| CVE-2026-101338 | 14 Oct 2026 | CVSS 8.7 | NLnet Labs NSDWhen a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit… | |
| CVE-2026-101339 | 14 Oct 2026 | CVSS 8.7 | NLnet Labs NSDA HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack… | |
| CVE-2026-101341 | 14 Oct 2026 | CVSS 8.7 | NLnet Labs NSDTokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for… | |
| CVE-2026-101337 | 14 Oct 2026 | CVSS 8.7 | NLnet Labs NSDWhen base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to… | |
| CVE-2026-19538 | 26 Aug 2026 | CVSS 8.2 | NLnet Labs NSDThe BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting… | |
| CVE-2026-19401 | 26 Aug 2026 | CVSS 8.2 | NLnet Labs NSDAny remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned… | |
| CVE-2026-18916 | 26 Aug 2026 | CVSS 6.9 | NLnet Labs NSDAny remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the… | |
| CVE-2026-18664 | 26 Aug 2026 | CVSS 8.2 | NLnet Labs NSDWhen ranges are used for access control (i.e. of the form 1.2.3.4-1.2.3.25), because NSD wrongly compares the IP address with the range on little… | |
| CVE-2026-12490 | 25 Jun 2026 | CVSS 8.2 | NLnet Labs NSDWhen a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no… | |
| CVE-2026-12246 | 25 Jun 2026 | CVSS 7.2 | NLnet Labs NSDNSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite… | |
| CVE-2026-12245 | 25 Jun 2026 | CVSS 8.7 | NLnet Labs NSDNSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be… | |
| CVE-2026-12244 | 25 Jun 2026 | CVSS 8.7 | NLnet Labs NSDIf NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted… |