nsd

NSD NLnet Labs 네임 서버 데몬NSD은 권위 있는authoritative DNS 네임 서버입니다. 속도, 신뢰성, 안정성 및 보안이 매우 중요한 환경에서의 운영을 위해 개발되었습니다. 피드백이 있으시면 언제든 환영합니다. 주저하지 말고 GitHub에 이슈를 작성하거나 커뮤니티 포럼에 메시지를 남겨 주세요. NSD에 대해 더 자세히 알아보려면 문서를 읽어보세요. 빌드 다음이 설치되어 있는지 확인하세요: C 툴체인 컴파일러, 링커, 어셈블러 등 C를 컴파일하는 데 필요한 도구 모음 OpenSSL 및 해당 include ...

s3enum

s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation go install github.com/koenrh/s3enum@latest Usage You nee...

CVE-2026-81634

In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...

[SECURITY] Fedora 45 Update: nsd-4.15.1-1.fc45

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

[SECURITY] Fedora 43 Update: nsd-4.15.1-1.fc43

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

FreeBSD : NSD -- multiple vulnerabilities (a711b018-a24b-11f1-81e6-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a711b018-a24b-11f1-81e6-3c7c3fba4204 advisory. NLnet Labs reports: Tenable has extracted the preceding description block directly from the...

CVE-2026-80212 - Memory exhaustion through malicious DNS responses

An application that resolves a hostname an attacker can influence, such as a webhook target or a user-supplied URL, can be made to consume memory without bound. The attacker points a domain at a name server they control and returns responses that the library retains permanently. Repeated lookups...

MAL-2026-12787 Malicious code in dynstrg-howto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800fab99d95f1a2cef6ebf269ca240bf60518735cfb58c7c24b6a8474c72ee77 package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's hostname, username, home directory, DNS...

MAL-2026-12456 Malicious code in statist-statist-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192fac66540fb5d3f4c376673ddd67a4e43053342e745e538f7ddcc08b0a9042 index.js requires./setup on module load. setup.js assembles obfuscated destination hostnames from split string arrays, selects a platform-specific...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...

[SECURITY] Fedora 43 Update: nsd-4.15.0-1.fc43

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution...

Fedora 43 : nsd (2026-0b77a23312)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0b77a23312 advisory. FEATURES: Merge 483 from ruuda: Improve Prometheus metrics: Move zonestats from metric name to label BUG FIXES: Fix 478: Feature request: reduce...

openSUSE 16 Security Update : nsd (openSUSE-SU-2026:21502-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21502-1 advisory. Changes in nsd: - Update nsd.keyring - update to 4.14.3: https://github.com/NLnetLabs/nsd/blob/NSD4143REL/doc/ChangeLog CVE-2026-12490: Bypass o...

The vulnerability of the Unbound DNS server, related to insufficient validation of input data and improper implementation of functions, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-6949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory without validating the path is not a...

Linux Distros Unpatched Vulnerability : CVE-2026-52684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolv...

CVE-2026-52684

If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not use...

CVE-2026-10723 Incorrect acceptance of NSEC3 records

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through...

EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2026-2814)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...

io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records

A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...