Nsd

This hub aggregates every CVE we track for Nsd, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Nsd.

• CVE-2026-19538Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS7.5Aug 26, 2026
• CVE-2026-19401Remote UDP DoS by sending multiple DNS Cookie optionsAug 26, 2026
• CVE-2026-18916Remote TCP DoS by throttling the TCP receive window7.5Aug 26, 2026
• CVE-2026-18664Wrong interpretation of ACL ranges9.1Aug 26, 2026
• CVE-2026-12490Bypass of client certificate verification with transfer over TLS7.5Jun 25, 2026
• CVE-2026-12246Out of bounds stack write with crafted APL RR8.1Jun 25, 2026
• CVE-2026-12245Denial of DNS over TLS service by any DoT client7.5Jun 25, 2026
• CVE-2026-12244Heap overflow and crash with crafted SVCB RR8.8Jun 25, 2026
• CVE-2020-28935Local symlink attack in Unbound and NSD5.5Dec 7, 2020
• CVE-2013-5661Cache Poisoning issue exists in DNS Response Rate Limiting.5.9Nov 5, 2019
• CVE-2016-6173NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data.7.5Feb 9, 2017
• CVE-2012-2978query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafte...5.0Jul 27, 2012
• CVE-2009-1755Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) ...5.0May 22, 2009