Skip to contentNlnet Labs vulnerabilities
Newest
- nlnet labs unboundLibunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminatedCVE-2026-44621Fix available5.9 Medium
- nlnet labs unboundExtra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue recordsCVE-2026-42955Fix available3.7 Low
- nlnet labs unboundDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queriesCVE-2026-41637Fix available3.7 Low
- nlnet labs unboundPacket of death for DNSCrypt over TCPCVE-2026-40691Fix available7.5 High
- nlnet labs unboundRemote DNS-over-QUIC denial of service due to `quic-size` budget bypassCVE-2026-32665Fix available7.5 High
- nlnet labs unboundAssertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environmentsCVE-2026-14586Fix available5.9 Medium
- nlnet labs nsdBypass of client certificate verification with transfer over TLSCVE-2026-12490Fix available8.2 High
- nlnet labs nsdOut of bounds stack write with crafted APL RRCVE-2026-12246Fix available7.2 High
- nlnet labs nsdDenial of DNS over TLS service by any DoT clientCVE-2026-12245Fix available8.7 High
- nlnet labs nsdHeap overflow and crash with crafted SVCB RRCVE-2026-12244Fix available8.7 High
- microsoft ldnsInsufficient verification that responses belong to a queryCVE-2026-10846Fix available8.2 High
- nlnet labs routinatorRoutinator crashes on specifically crafted RRDP XML filesCVE-2026-49235Fix available8.7 High
- nlnet labs routinatorRoutinator crashes on specifically crafted ASN strings in the APICVE-2026-49234Fix available8.2 High
- nlnet labs routinatorRoutinator cache path traversal using rogue rsync URIsCVE-2026-49233Fix available8.3 High
- nlnet labs routinatorRoutinator exits when accepting an incoming HTTP or RTR connection failsCVE-2026-492328.7 High
- nlnet labs unboundUse after free and crash under special conditions in RPZ codeCVE-2026-44608Fix available4.6 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreUnbounded name compression in certain cases causes degradation of serviceCVE-2026-44390Fix available6.9 Medium
- nlnet labs unboundPossible cache poisoning via promiscuous records for the authority sectionCVE-2026-42960Fix available5.7 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreCrash during DNSSEC validation of malicious contentCVE-2026-42959Fix available8.7 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreHeap overflow with multiple NSID, COOKIE, PADDING EDNS optionsCVE-2026-42944Fix available8.7 High
- nlnet labs unboundDegradation of service with unbounded NSEC3 hash calculationsCVE-2026-42923Fix available6.9 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreJostle logic bypass degrades resolution performanceCVE-2026-42534Fix available6.9 Medium
- nlnet labs unbound, red hat data grid 8, enterprise linux 10 +10 more +12 moreLong list of incoming EDNS options degrades performanceCVE-2026-41292Fix available6.6 Medium
- nlnet labs unboundAnother 'ghost domain names' attack variantCVE-2026-40622Fix available6.6 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 morePossible arbitrary code execution during DNSSEC validationCVE-2026-33278Fix available9.1 Critical
- nlnet labs unboundPacket of death with DNSCryptCVE-2026-32792Fix available4.6 Medium
- nlnet labs unboundPossible domain hijacking via promiscuous records in the authority sectionCVE-2025-11411Fix available5.7 Medium
- nlnet labs unboundCache poisoning via the ECS-enabled Rebirthday AttackCVE-2025-5994Fix available8.7 High
- nlnet labs routinatorRoutinator crashes when illegal characters are present in manifest file namesCVE-2025-06387.5 High
- nlnet labs unbound, debian linux +1 moreUnbounded name compression could lead to Denial of ServiceCVE-2024-8508Fix available5.3 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreDenial of service when trimming EDE text on positive repliesCVE-2024-1931Fix available7.5 High
- nlnet labs routinator, fedoraproject fedora +1 moreRoutinator terminates when RTR connection is reset too quickly after openingCVE-2024-16227.5 High
- nlnet labs routinatorPossible path traversal when storing RRDP responsesCVE-2023-39916Fix available9.3 Critical
- nlnet labs routinatorCrashes on parsing certain invalid RPKI objectsCVE-2023-399157.5 High
- nlnet labs bcderBER/CER/DER decoder panics on invalid inputCVE-2023-39914Fix available7.5 High
- nlnet labs krillTriggered crash on direct RRDP accessCVE-2023-01587.5 High
- nlnet labs unbound, fedoraproject fedora +1 moreNRDelegation AttackCVE-2022-3204Fix available7.5 High
- nlnet labs routinatorFatal error on incorrect base64 data in RRDPCVE-2022-3029Fix available7.5 High
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by updating almost expired delegation informationCVE-2022-30699Fix available6.5 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by introducing subdomain delegationsCVE-2022-30698Fix available6.5 Medium
- nlnet labs routinator, debian linux +1 moregzip transfer encoding caused out-of-memory crashCVE-2021-43174Fix available7.5 High
- nlnet labs routinator, debian linux +1 moreHanging RRDP requestCVE-2021-43173Fix available7.5 High
- nlnet labs routinatorInfinite length chain of RRDP repositoriesCVE-2021-43172Fix available7.5 High
- nlnet labs routinatorInvalid RPKI data could disable Route Origin Validation on RTR clients.CVE-2021-415317.5 High
- nlnet labs nsd, unbound, debian linux +1 more +3 moreLocal symlink attack in Unbound and NSDCVE-2020-28935Fix available5.5 Medium
- nlnet labs unboundAn incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as...CVE-2020-10772Fix available7.5 High
- nlnet labs unbound, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An...CVE-2017-15105Fix available5.3 Medium