nlnetlabs
Networking Infrastructureoss-project
Latest CVEs
The 15 most recently published vulnerabilities affecting nlnetlabs.
- CVE-2026-85501Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC5.3
- CVE-2026-82720Use-after-free in DoH stream cleanup code path5.9
- CVE-2026-82717CNAME synthesis could lead to heap corruption9.8
- CVE-2026-81642Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY9.8
- CVE-2026-81634Possible heap buffer overflow during DNSSEC canonicalization7.5
- CVE-2026-80225Possible degradation of service from continuous queries on the same TCP/DoT connection5.3
- CVE-2026-78227Use-after-free in DoQ stream output buffer on reset re-transmission6.5
- CVE-2026-77955Possible ZONEMD verification bypass window4.4
- CVE-2026-77860'serve-expired' can bypass Unbound 'wait-limit'3.7
- CVE-2026-19538Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS7.5
- CVE-2026-18916Remote TCP DoS by throttling the TCP receive window7.5
- CVE-2026-18664Wrong interpretation of ACL ranges9.1
- CVE-2026-56444Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration5.9
- CVE-2026-56416Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name4.8
- CVE-2026-55991Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp25.9