NLnet Labs NSD
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-101341 | 4.10.0 – < 4.15.3 | Stack overwrite from specially formatted TXT-DATA RDATA field | HIGH 8.7 | 0.3 % | ||
| CVE-2026-101339 | 4.10.0 – < 4.15.3 | Stack overwrite from a specially crafted and formatted HIP RR | HIGH 8.7 | 0.3 % | ||
| CVE-2026-101338 | 4.10.0 – < 4.15.3 | Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR | HIGH 8.7 | 0.3 % | ||
| CVE-2026-101337 | 4.10.0 – < 4.15.3 | Stack overwrite from specially formatted base64 RDATA field | HIGH 8.7 | 0.3 % | ||
| CVE-2026-19538 | 4.8.0 – < 4.15.1 | Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS | HIGH 8.2 | 0.4 % | ||
| CVE-2026-19401 | 4.3.7 – < 4.15.1 | Remote UDP DoS by sending multiple DNS Cookie options | HIGH 8.2 | 0.5 % | ||
| CVE-2026-18916 | 3.2.11 – < 4.15.1 | Remote TCP DoS by throttling the TCP receive window | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-18664 | 3.0.0 – < 4.15.1 | Wrong interpretation of ACL ranges | HIGH 8.2 | 0.4 % | ||
| CVE-2026-12490 | 4.10.1 – < 4.14.3 | Bypass of client certificate verification with transfer over TLS | HIGH 8.2 | 0.2 % | ||
| CVE-2026-12246 | 4.14.0 – < 4.14.3 | Out of bounds stack write with crafted APL RR | HIGH 7.2 | 0.4 % | ||
| CVE-2026-12245 | 4.13.0 – < 4.14.3 | Denial of DNS over TLS service by any DoT client | HIGH 8.7 | 0.5 % | ||
| CVE-2026-12244 | 4.14.0 – < 4.14.3 | Heap overflow and crash with crafted SVCB RR | HIGH 8.7 | 0.5 % | ||
| CVE-2020-28935 | <= 4.3.3 | Local symlink attack in Unbound and NSD | MEDIUM 5.5 | 0.5 % |