Login Request a demo
NS
Product
Nsd
by Nlnetlabs · last CVE Aug 26, 2026
12
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 8Medium 1Low 0
Severity
All severities12Critical1High8Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nsd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18664
9.1
0%
Aug 26
Wrong interpretation of ACL ranges
Affected: 3.0.0 before 4.15.1
CVE-2026-12244
8.8
0%
Jun 25
Heap overflow and crash with crafted SVCB RR
Affected: 4.14.0 before 4.14.3
CVE-2026-12246
8.1
0%
Jun 25
Out of bounds stack write with crafted APL RR
Affected: 4.14.0 before 4.14.3
CVE-2026-19538
7.5
0%
Aug 26
Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
Affected: 4.8.0 before 4.15.1
CVE-2026-19401
7.5
0%
Aug 26
Remote UDP DoS by sending multiple DNS Cookie options
Affected: 4.3.7 before 4.15.1
CVE-2026-18916
7.5
0%
Aug 26
Remote TCP DoS by throttling the TCP receive window
Affected: 3.2.11 before 4.15.1
CVE-2026-12490
7.5
0%
Jun 25
Bypass of client certificate verification with transfer over TLS
Affected: before 4.14.3
CVE-2026-12245
7.5
0%
Jun 25
Denial of DNS over TLS service by any DoT client
Affected: 4.13.0 before 4.14.3
CVE-2016-6173
7.5
3%
Feb 9
NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data
Affected: through 4.1.10
CVE-2013-5661
5.9
3%
Nov 5
Cache Poisoning issue exists in DNS Response Rate Limiting
Affected: 3.2.15
CVE-2012-2978
–
9%
Jul 27
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process…
Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +15 more
CVE-2009-1755
–
3%
May 22
Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial…
Affected: 2.0.0; 2.0.1; 2.0.2; 2.1.0; 2.1.1; 2.1.2; +5 more
Showing 12