Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-12246

Опубликовано: 25 июн. 2026
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:nlnetlabs:nsd:*:*:*:*:*:*:*:*
Версия от 4.14.0 (включая) до 4.14.3 (исключая)

EPSS

Процентиль: 22%
0.003
Низкий

8.1 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

CVSS3: 8
redhat
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

CVSS3: 8.1
debian
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, ...

CVSS3: 8.1
github
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

suse-cvrf
21 день назад

Security update for nsd

EPSS

Процентиль: 22%
0.003
Низкий

8.1 High

CVSS3

Дефекты

CWE-20