Nlnet Labs vulnerabilities

Products

• Unbound 59
• Routinator 20
• Nsd 13
• Krill 4

Newest

• nlnet labs krill Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same server CVE-2026-109142 8.4 HighNovember 2, 2026
• nlnet labs krill Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import CVE-2026-109141 8.4 HighNovember 2, 2026
• nlnet labs krill Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token CVE-2026-109140 8.4 HighNovember 2, 2026
• nlnet labs routinator Routinator may exit on malformed ranges CVE-2026-72758 7.5 HighOctober 26, 2026
• nlnet labs routinator Routinator HTTP server becomes unavailable with many unclosed connections CVE-2026-72757 5.3 MediumOctober 26, 2026
• nlnet labs routinator Routinator exits on malformed rsync URIs CVE-2026-72756 7.5 HighOctober 26, 2026
• nlnet labs routinator Routinator stores TA certificate in cache without validation CVE-2026-72755 3.8 LowOctober 26, 2026
• nlnet labs routinator Routinator exits when parsing an incorrect or very large CRL file CVE-2026-72754 7.5 HighOctober 26, 2026
• nlnet labs routinator Routinator incorrectly handles delta updates CVE-2026-72753 8.2 HighOctober 26, 2026
• nlnet labs routinator Routinator exits when requesting the output repeatedly CVE-2026-72752 6.5 MediumOctober 26, 2026
• nlnet labs unbound DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments. CVE-2026-97206 Public exploitFix available 7.5 HighOctober 21, 2026
• nlnet labs unbound Aggregate DNS name chained pointer decompression work leads to degradation of service. CVE-2026-96405 Fix available 5.3 MediumOctober 21, 2026
• nlnet labs unbound Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. CVE-2026-50106 Fix available 6.5 MediumOctober 21, 2026
• nlnet labs unbound Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record. CVE-2026-35501 Fix available 3.7 LowOctober 21, 2026
• nlnet labs unbound Possible cache poisoning vulnerability via a cache side-channel exposed by 'unwanted-reply-threshold' CVE-2026-109125 Fix available 5.3 MediumOctober 21, 2026
• nlnet labs nsd Stack overwrite from specially formatted TXT-DATA RDATA field CVE-2026-101341 Fix available 8.7 HighOctober 14, 2026
• nlnet labs nsd Stack overwrite from a specially crafted and formatted HIP RR CVE-2026-101339 Fix available 8.7 HighOctober 14, 2026
• nlnet labs nsd Stack overwrite from a specially crafted and formatted SVCB or HTTPS RR CVE-2026-101338 Fix available 8.7 HighOctober 14, 2026
• nlnet labs nsd Stack overwrite from specially formatted base64 RDATA field CVE-2026-101337 Fix available 8.7 HighOctober 14, 2026
• nlnet labs unbound Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC CVE-2026-85501 Fix available 5.3 MediumSeptember 16, 2026
• nlnet labs unbound Use-after-free in DoH stream cleanup code path CVE-2026-82720 Fix available 5.9 MediumSeptember 16, 2026
• nlnet labs unbound CNAME synthesis could lead to heap corruption CVE-2026-82717 Fix available 8.4 HighSeptember 16, 2026
• nlnet labs unbound Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY CVE-2026-81642 Public exploitFix available 9.1 CriticalSeptember 16, 2026
• nlnet labs unbound Possible heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 Fix available 7.5 HighSeptember 16, 2026
• nlnet labs unbound Possible degradation of service from continuous queries on the same TCP/DoT connection CVE-2026-80225 Fix available 5.3 MediumSeptember 16, 2026
• nlnet labs unbound Use-after-free in DoQ stream output buffer on reset re-transmission CVE-2026-78227 Fix available 6.5 MediumSeptember 16, 2026
• nlnet labs unbound Possible ZONEMD verification bypass window CVE-2026-77955 Fix available 4.4 MediumSeptember 16, 2026
• nlnet labs unbound 'serve-expired' can bypass Unbound 'wait-limit' CVE-2026-77860 Fix available 3.7 LowSeptember 16, 2026
• nlnet labs nsd Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS CVE-2026-19538 Fix available 8.2 HighAugust 26, 2026
• nlnet labs nsd Remote UDP DoS by sending multiple DNS Cookie options CVE-2026-19401 Fix available 8.2 HighAugust 26, 2026
• nlnet labs nsd Remote TCP DoS by throttling the TCP receive window CVE-2026-18916 Fix available 6.9 MediumAugust 26, 2026
• nlnet labs nsd Wrong interpretation of ACL ranges CVE-2026-18664 Fix available 8.2 HighAugust 26, 2026
• nlnet labs unbound Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration CVE-2026-56444 Fix available 5.9 MediumJuly 22, 2026
• nlnet labs unbound Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name CVE-2026-56416 Fix available 4.8 MediumJuly 22, 2026
• nlnet labs unbound Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 CVE-2026-55991 Fix available 5.9 MediumJuly 22, 2026
• nlnet labs unbound Packet of death for a DNSCrypt misconfigured Unbound CVE-2026-55990 Fix available 5.9 MediumJuly 22, 2026
• nlnet labs unbound 'dns-error-reporting: yes' leads to stack buffer overflow CVE-2026-55973 Fix available 7.5 HighJuly 22, 2026
• nlnet labs unbound 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash CVE-2026-55717 Fix available 5.9 MediumJuly 22, 2026
• nlnet labs unbound Privacy/configuration issue when adding local data in views through 'unbound-control' CVE-2026-55708 Fix available 3.1 LowJuly 22, 2026
• nlnet labs unbound DNS Cookie bypass when combined with proxy-protocol use CVE-2026-54478 Fix available 3.7 LowJuly 22, 2026
• nlnet labs unbound Memory corruption could lead to crash and denial of service CVE-2026-52863 Fix available 5.9 MediumJuly 22, 2026
• nlnet labs unbound Possible cache poisoning attack by mapping source port population per thread CVE-2026-50252 Fix available 5.7 MediumJuly 22, 2026
• nlnet labs unbound Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush CVE-2026-50251 Fix available 5.3 MediumJuly 22, 2026
• nlnet labs unbound BOGUS configured primary hostname accepted for XFR in auth/rpz zones CVE-2026-50248 Fix available 6.5 MediumJuly 22, 2026
• nlnet labs unbound 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL CVE-2026-50243 Fix available 6.3 MediumJuly 22, 2026
• nlnet labs unbound Possible heap use-after-free in an error path when a DoT forwarded query is jostled out CVE-2026-50046 Fix available 5.9 MediumJuly 22, 2026
• nlnet labs unbound 'max-global-quota' reset by DNSSEC validation restarts CVE-2026-50045 Fix available 5.3 MediumJuly 22, 2026
• nlnet labs unbound A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path CVE-2026-46582 Fix available 3.7 LowJuly 22, 2026
• nlnet labs unbound Cross-zone wildcard cache poisoning via RRSIG.labels manipulation CVE-2026-44690 Fix available 7.5 HighJuly 22, 2026
• nlnet labs unbound Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN CVE-2026-44687 Fix available 3.7 LowJuly 22, 2026
• Show olderLoading…