Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rcp9-2p4r-m2hm

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.

EPSS

Процентиль: 25%
0.00319
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 месяцев назад

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.

CVSS3: 7.5
redhat
около 2 месяцев назад

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.

CVSS3: 7.5
nvd
около 2 месяцев назад

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.

CVSS3: 7.5
debian
около 2 месяцев назад

NSD from version 4.13.0 has a heap use-after-free bug in logging error ...

suse-cvrf
21 день назад

Security update for nsd

EPSS

Процентиль: 25%
0.00319
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-416