What’s Vulnerable › Products

NLnet Labs NSD vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your NLnet Labs NSD version is affected

Latest NLnet Labs NSD vulnerabilities

• CVE-2026-101341 — Stack overwrite from specially formatted TXT-DATA RDATA field (CVSS 8.7)
• CVE-2026-101339 — Stack overwrite from a specially crafted and formatted HIP RR (CVSS 8.7)
• CVE-2026-101338 — Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR (CVSS 8.7)
• CVE-2026-101337 — Stack overwrite from specially formatted base64 RDATA field (CVSS 8.7)
• CVE-2026-19538 — Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS (CVSS 7.5)
• CVE-2026-19401 — Remote UDP DoS by sending multiple DNS Cookie options (CVSS 7.5)
• CVE-2026-18916 — Remote TCP DoS by throttling the TCP receive window (CVSS 7.5)
• CVE-2026-18664 — Wrong interpretation of ACL ranges (CVSS 9.1)
• CVE-2026-12490 — Bypass of client certificate verification with transfer over TLS (CVSS 7.5)
• CVE-2026-12246 — Out of bounds stack write with crafted APL RR (CVSS 8.1)
• CVE-2026-12245 — Denial of DNS over TLS service by any DoT client (CVSS 7.5)
• CVE-2026-12244 — Heap overflow and crash with crafted SVCB RR (CVSS 8.8)
• CVE-2013-5661 — (CVSS 5.9)
• CVE-2016-6173 — (CVSS 7.5)
• CVE-2012-2978 — (CVSS 5.0)
• CVE-2009-1755 — (CVSS 5.0)