Every CVE whose affected-product data names Nlnetlabs Nsd, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (8)
CVE-2026-12244 — CVSS 8.8 (high): If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special…
CVE-2026-12246 — CVSS 8.1 (high): NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will…
CVE-2026-12490 — CVSS 7.5 (high): When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name…
CVE-2016-6173 — CVSS 7.5 (high): NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone…
CVE-2026-12245 — CVSS 7.5 (high): NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which…
CVE-2009-1755 — CVSS 5.0 (medium): Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7…
CVE-2012-2978 — CVSS 5.0 (medium): query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL…