Product by Nlnet Labs
Nsd
13 known vulnerabilities in Nsd (Nlnet Labs), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-18664 | Wrong interpretation of ACL ranges | 9.1 | |
| High | CVE-2026-101341 | Stack overwrite from specially formatted TXT-DATA RDATA field | — | |
| High | CVE-2026-101339 | Stack overwrite from a specially crafted and formatted HIP RR | — | |
| High | CVE-2026-101338 | Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR | — | |
| High | CVE-2026-101337 | Stack overwrite from specially formatted base64 RDATA field | — | |
| High | CVE-2026-19401 | Remote UDP DoS by sending multiple DNS Cookie options | 7.5 | |
| High | CVE-2026-12244 | Heap overflow and crash with crafted SVCB RR | 8.8 | |
| High | CVE-2026-19538 | Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS | 7.5 | |
| High | CVE-2026-12245 | Denial of DNS over TLS service by any DoT client | 7.5 | |
| High | CVE-2026-18916 | Remote TCP DoS by throttling the TCP receive window | 7.5 | |
| High | CVE-2026-12246 | Out of bounds stack write with crafted APL RR | 8.1 | |
| High | CVE-2026-12490 | Bypass of client certificate verification with transfer over TLS | 7.5 | |
| Medium | CVE-2020-28935 | Local symlink attack in Unbound and NSD | 5.5 |