Skip to contentNlnetlabs vulnerabilities
Newest
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreHeap overflow with multiple NSID, COOKIE, PADDING EDNS optionsCVE-2026-42944Fix available8.7 High
- nlnet labs unboundDegradation of service with unbounded NSEC3 hash calculationsCVE-2026-42923Fix available6.9 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreJostle logic bypass degrades resolution performanceCVE-2026-42534Fix available6.9 Medium
- nlnet labs unbound, red hat data grid 8, enterprise linux 10 +10 more +12 moreLong list of incoming EDNS options degrades performanceCVE-2026-41292Fix available6.6 Medium
- nlnet labs unboundAnother 'ghost domain names' attack variantCVE-2026-40622Fix available6.6 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 morePossible arbitrary code execution during DNSSEC validationCVE-2026-33278Fix available9.1 Critical
- nlnet labs unboundPacket of death with DNSCryptCVE-2026-32792Fix available4.6 Medium
- nlnet labs unbound, debian linux +1 moreUnbounded name compression could lead to Denial of ServiceCVE-2024-8508Fix available5.3 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreDenial of service when trimming EDE text on positive repliesCVE-2024-1931Fix available7.5 High
- nlnet labs routinator, fedoraproject fedora +1 moreRoutinator terminates when RTR connection is reset too quickly after openingCVE-2024-16227.5 High
- fedoraproject fedora, isc bind, microsoft windows server 2008 +10 more +12 moreCertain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers...CVE-2023-50387Public exploitFix availableEPSS 100.0%7.5 High
- nlnet labs routinatorPossible path traversal when storing RRDP responsesCVE-2023-39916Fix available9.3 Critical
- nlnet labs routinatorCrashes on parsing certain invalid RPKI objectsCVE-2023-399157.5 High
- nlnet labs bcderBER/CER/DER decoder panics on invalid inputCVE-2023-39914Fix available7.5 High
- nlnet labs krillTriggered crash on direct RRDP accessCVE-2023-01587.5 High
- nlnet labs unbound, fedoraproject fedora +1 moreNRDelegation AttackCVE-2022-3204Fix available7.5 High
- nlnet labs routinatorFatal error on incorrect base64 data in RRDPCVE-2022-3029Fix available7.5 High
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by updating almost expired delegation informationCVE-2022-30699Fix available6.5 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by introducing subdomain delegationsCVE-2022-30698Fix available6.5 Medium
- nlnetlabs ldnsWhen a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for...CVE-2020-19861Fix available7.5 High
- nlnetlabs ldnsWhen ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a...CVE-2020-19860Fix available6.5 Medium
- nlnet labs routinator, debian linux +1 moregzip transfer encoding caused out-of-memory crashCVE-2021-43174Fix available7.5 High
- nlnet labs routinator, debian linux +1 moreHanging RRDP requestCVE-2021-43173Fix available7.5 High
- nlnet labs routinatorInfinite length chain of RRDP repositoriesCVE-2021-43172Fix available7.5 High
- nlnet labs routinatorInvalid RPKI data could disable Route Origin Validation on RTR clients.CVE-2021-415317.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a...CVE-2019-25031Fix availableDisputed5.9 Medium
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.CVE-2019-25032Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.CVE-2019-25033Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an...CVE-2019-25034Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.CVE-2019-25035Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.CVE-2019-25036Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an...CVE-2019-25037Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.CVE-2019-25038Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.CVE-2019-25039Fix availableDisputed9.8 Critical
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.CVE-2019-25040Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.CVE-2019-25041Fix availableDisputed7.5 High
- nlnetlabs unbound, debian linux +1 moreUnbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.CVE-2019-25042Fix availableDisputed9.8 Critical
- nlnet labs nsd, unbound, debian linux +1 more +3 moreLocal symlink attack in Unbound and NSDCVE-2020-28935Fix available5.5 Medium
- nlnet labs unboundAn incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as...CVE-2020-10772Fix available7.5 High
- nlnetlabs routinatorAn issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers...CVE-2020-173667.4 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- nlnetlabs unbound, fedoraproject fedora, opensuse leap +2 moreUnbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code...CVE-2019-18934Fix available7.3 High
- isc bind, nic knot resolver, nlnetlabs nsd +1 more +3 moreCache Poisoning issue exists in DNS Response Rate Limiting.CVE-2013-56615.9 Medium
- nlnetlabs unbound, canonical ubuntu linux +1 moreUnbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a...CVE-2019-16866Fix available7.5 High
- nlnetlabs name server daemonnsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate(...CVE-2019-13207Fix available9.8 Critical
- nlnet labs unbound, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An...CVE-2017-15105Fix available5.3 Medium
- nlnetlabs ldnsA double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000232Fix available9.8 Critical
- nlnetlabs ldnsA double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000231Fix available9.8 Critical
- nlnetlabs nsdNSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk...CVE-2016-6173Fix available7.5 High
- Show moreLoading…