NL
Vendor
Nlnetlabs
111
CVEs
0
On KEV
0
New 30D
Products
UN10.0
Unbound
Nlnetlabs
73 CVEs0 on KEV0 new
NS9.1
Nsd
Nlnetlabs
12 CVEs0 on KEV0 new
RO7.5
Routinator
Nlnetlabs
12 CVEs0 on KEV0 new
LD9.8
Ldns
Nlnetlabs
8 CVEs0 on KEV0 new
NS9.8
Name Server Daemon
Nlnetlabs
2 CVEs0 on KEV0 new
NE9.8
Net::DNS
NLNETLABS
2 CVEs0 on KEV0 new
BC7.5
Bcder
Nlnetlabs
1 CVEs0 on KEV0 new
KR7.5
Krill
Nlnetlabs
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-85501 | UN Unbound Nlnetlabs | 7.5 | Sep 16 | Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC |
| CVE-2026-82720 | UN Unbound Nlnetlabs | 5.9 | Sep 16 | Use-after-free in DoH stream cleanup code path |
| CVE-2026-82717 | UN Unbound Nlnetlabs | 9.8 | Sep 16 | CNAME synthesis could lead to heap corruption |
| CVE-2026-81642 | UN Unbound Nlnetlabs | 9.8 | Sep 16 | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY |
| CVE-2026-81634 | UN Unbound Nlnetlabs | 7.5 | Sep 16 | Possible heap buffer overflow during DNSSEC canonicalization |
| CVE-2026-80225 | UN Unbound Nlnetlabs | 7.5 | Sep 16 | Possible degradation of service from continuous queries on the same TCP/DoT connection |
| CVE-2026-78227 | UN Unbound Nlnetlabs | 6.5 | Sep 16 | Use-after-free in DoQ stream output buffer on reset re-transmission |
| CVE-2026-77955 | UN Unbound Nlnetlabs | 4.4 | Sep 16 | Possible ZONEMD verification bypass window |
| CVE-2026-77860 | UN Unbound Nlnetlabs | 3.7 | Sep 16 | 'serve-expired' can bypass Unbound 'wait-limit' |
| CVE-2026-19538 | NS Nsd Nlnetlabs | 7.5 | Aug 26 | Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS |
| CVE-2026-19401 | NS Nsd Nlnetlabs | 7.5 | Aug 26 | Remote UDP DoS by sending multiple DNS Cookie options |
| CVE-2026-18916 | NS Nsd Nlnetlabs | 7.5 | Aug 26 | Remote TCP DoS by throttling the TCP receive window |
| CVE-2026-18664 | NS Nsd Nlnetlabs | 9.1 | Aug 26 | Wrong interpretation of ACL ranges |
| CVE-2026-56444 | UN Unbound Nlnetlabs | 5.9 | Jul 22 | Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration |
| CVE-2026-56416 | UN Unbound Nlnetlabs | 4.8 | Jul 22 | Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name |
| CVE-2026-55991 | UN Unbound Nlnetlabs | 5.9 | Jul 22 | Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2 |
| CVE-2026-55990 | UN Unbound Nlnetlabs | 5.9 | Jul 22 | Packet of death for a DNSCrypt misconfigured Unbound |
| CVE-2026-55973 | UN Unbound Nlnetlabs | 7.5 | Jul 22 | 'dns-error-reporting: yes' leads to stack buffer overflow |
| CVE-2026-55717 | UN Unbound Nlnetlabs | 5.9 | Jul 22 | 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash |
| CVE-2026-55708 | UN Unbound Nlnetlabs | 3.1 | Jul 22 | Privacy/configuration issue when adding local data in views through 'unbound-control' |
| CVE-2026-54478 | UN Unbound Nlnetlabs | 3.7 | Jul 22 | DNS Cookie bypass when combined with proxy-protocol use |
| CVE-2026-52863 | UN Unbound Nlnetlabs | 5.9 | Jul 22 | Memory corruption could lead to crash and denial of service |
| CVE-2026-50252 | UN Unbound Nlnetlabs | 9.3 | Jul 22 | Possible cache poisoning attack by mapping source port population per thread |
| CVE-2026-50251 | UN Unbound Nlnetlabs | 5.3 | Jul 22 | Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush |
| CVE-2026-50248 | UN Unbound Nlnetlabs | 6.5 | Jul 22 | BOGUS configured primary hostname accepted for XFR in auth/rpz zones |
| CVE-2026-50243 | UN Unbound Nlnetlabs | 3.7 | Jul 22 | 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL |
| CVE-2026-50046 | UN Unbound Nlnetlabs | 5.9 | Jul 22 | Possible heap use-after-free in an error path when a DoT forwarded query is jostled out |
| CVE-2026-50045 | UN Unbound Nlnetlabs | 5.3 | Jul 22 | 'max-global-quota' reset by DNSSEC validation restarts |
| CVE-2026-46582 | UN Unbound Nlnetlabs | 3.7 | Jul 22 | A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path |
| CVE-2026-44690 | UN Unbound Nlnetlabs | 7.5 | Jul 22 | Cross-zone wildcard cache poisoning via RRSIG.labels manipulation |
| CVE-2026-44687 | UN Unbound Nlnetlabs | 3.7 | Jul 22 | Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN |
| CVE-2026-44621 | UN Unbound Nlnetlabs | 5.9 | Jul 22 | Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated |
| CVE-2026-42955 | UN Unbound Nlnetlabs | 3.7 | Jul 22 | Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records |
| CVE-2026-41637 | UN Unbound Nlnetlabs | 3.7 | Jul 22 | Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries |
| CVE-2026-40691 | UN Unbound Nlnetlabs | 7.5 | Jul 22 | Packet of death for DNSCrypt over TCP |
| CVE-2026-32665 | UN Unbound Nlnetlabs | 7.5 | Jul 22 | Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass |
| CVE-2026-64194 | NE Net::DNS NLNETLABS | 7.5 | Jul 20 | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains |
| CVE-2026-64193 | NE Net::DNS NLNETLABS | 9.8 | Jul 20 | Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR |
| CVE-2026-12490 | NS Nsd Nlnetlabs | 7.5 | Jun 25 | Bypass of client certificate verification with transfer over TLS |
| CVE-2026-12246 | NS Nsd Nlnetlabs | 8.1 | Jun 25 | Out of bounds stack write with crafted APL RR |
| CVE-2026-12245 | NS Nsd Nlnetlabs | 7.5 | Jun 25 | Denial of DNS over TLS service by any DoT client |
| CVE-2026-12244 | NS Nsd Nlnetlabs | 8.8 | Jun 25 | Heap overflow and crash with crafted SVCB RR |
| CVE-2026-10846 | LD Ldns Nlnetlabs | 7.5 | Jun 10 | Insufficient verification that responses belong to a query |
| CVE-2026-49235 | RO Routinator Nlnetlabs | 7.5 | Jun 8 | Routinator crashes on specifically crafted RRDP XML files |
| CVE-2026-49234 | RO Routinator Nlnetlabs | 7.5 | Jun 8 | Routinator crashes on specifically crafted ASN strings in the API |
| CVE-2026-49233 | RO Routinator Nlnetlabs | 7.5 | Jun 8 | Routinator cache path traversal using rogue rsync URIs |
| CVE-2026-44608 | UN Unbound Nlnetlabs | 5.9 | May 20 | Use after free and crash under special conditions in RPZ code |
| CVE-2026-44390 | UN Unbound Nlnetlabs | 5.3 | May 20 | Unbounded name compression in certain cases causes degradation of service |
| CVE-2026-42960 | UN Unbound Nlnetlabs | 10.0 | May 20 | Possible cache poisoning via promiscuous records for the authority section |
| CVE-2026-42959 | UN Unbound Nlnetlabs | 7.5 | May 20 | Crash during DNSSEC validation of malicious content |
| CVE-2026-42944 | UN Unbound Nlnetlabs | 7.5 | May 20 | Heap overflow with multiple NSID, COOKIE, PADDING EDNS options |
| CVE-2026-42923 | UN Unbound Nlnetlabs | 5.3 | May 20 | Degradation of service with unbounded NSEC3 hash calculations |
| CVE-2026-42534 | UN Unbound Nlnetlabs | 5.3 | May 20 | Jostle logic bypass degrades resolution performance |
| CVE-2026-41292 | UN Unbound Nlnetlabs | 7.5 | May 20 | Long list of incoming EDNS options degrades performance |
| CVE-2026-40622 | UN Unbound Nlnetlabs | 7.5 | May 20 | Another 'ghost domain names' attack variant |
| CVE-2026-33278 | UN Unbound Nlnetlabs | 9.8 | May 20 | Possible arbitrary code execution during DNSSEC validation |
| CVE-2026-32792 | UN Unbound Nlnetlabs | 5.3 | May 20 | Packet of death with DNSCrypt |
| CVE-2024-8508 | UN Unbound Nlnetlabs | 5.3 | Oct 3 | NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for |
| CVE-2024-1931 | UN Unbound Nlnetlabs | 7.5 | Mar 7 | NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite… |
| CVE-2024-1622 | RO Routinator Nlnetlabs | 7.5 | Feb 26 | Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening |