CVE-2013-5661

The connected documents consistently describe CVE-2013-5661 as a DNS cache poisoning issue in the DNS Response Rate Limiting mechanism of ISC BIND. The vulnerability is tied to BIND’s handling of responses that can be poisoned to contaminate DNS caches. Concrete details (affected versions, exact ...

CVE-2016-6173

NSD before 4.1.11 is vulnerable to a denial of service via zone transfers with unlimited data, enabling remote DNS master servers to exhaust /tmp and crash a slave. Affected component: NSD (DNS server). Root cause: improper handling of unlimited data in zone transfers. Impact: DoS with HIGH likel...

CVE-2009-1755

NSD (Name Server Daemon) : Off-by-one buffer overflow in packet_read_query_section (packet.c, NSD 3.2.1) and process_query_section (query.c, NSD 2.3.7) allows remote exploitation to crash the server and potentially execute arbitrary code via unspecified vectors. The OpenVAS entries corroborate th...

CVE-2012-2978

NSD 3.0.x/3.1.x up to 3.1.1 and 3.2.x before 3.2.12 are affected by an issue where a crafted DNS packet can trigger a NULL pointer dereference, causing a denial of service (child process crash). Several public advisories (Fedora 2012-11203/11207, Debian DSA-2515-1, Fedora advisory 2012-10893) ind...

CVE-2026-12244

NSD (the DNS server) is affected when configured as a secondary for a zone. A primary can crash NSD by sending an AXFR containing a DNS message with a specially crafted SVCB RR whose rdata size is 65512, which causes an (uint16_t) length to overflow while allocating space for the RR wrap (total s...

CVE-2026-12246

NSD 4.14.0 contains a vulnerability where a specially crafted APL RR with adflength exceeding the address family limit can cause a stack overwrite when writing the zone to disk, allowing up to 111 attacker-controlled bytes to influence memory. This is a data/stack corruption issue that affects th...

CVE-2026-12490

CVE-2026-12490 describes a bypass of client certificate verification during transfers when a provide-xfr rule uses a tls-auth-name. A secondary transfer may require a client certificate with that name, but no certificate is needed if the request is over TLS on the regular tls-port (not tls-auth-p...

CVE-2026-12245

NSD version 4.13.0 and later contains a heap use-after-free in logging errors on TLS connections, which can crash the server process. The issue is triggerable by sending a DNS query over DoT and then closing the connection without reading the response, indicating a network-based impact with poten...

CVE-2026-18664

NSD (Name Server Daemon) by NLnet Labs contains an endianness bug in its ACL range comparison logic. On little-endian systems, IPv4 and IPv6 addresses are compared against access-control ranges (e.g., 1.2.3.4–1.2.3.25) using host endianness, while the values are stored in network byte order (big-...

CVE-2026-18916

NSD (NLnet Labs) DNS server is vulnerable to a remote TCP denial-of-service : any unauthenticated network client can crash a serve child process by throttling the TCP receive window after issuing a TCP query. By repeatedly crashing serve children, an attacker can deny all TCP service to the affec...

CVE-2026-19401

NSD (Name Server Daemon) is vulnerable to a remote UDP denial-of-service targeting its serve child process. An unauthenticated remote attacker can crash the serve child by sending a crafted UDP message containing a specially tuned number of DNS Cookie options (17 when the UDP payload size is 512)...

CVE-2026-19538

This vulnerability affects NSD (NLnet Labs' DNS server daemon). BLOCKED access control list items on the proxy protocol port can be completely bypassed by connecting over TCP or TLS and sending the query twice on a single kept-open connection. The CVSS 4.0 score is 8.2 (HIGH) , with primary impac...