Поиск уязвимостей
Количество 23
Количество 23
CVE-2026-12246
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, ...
GHSA-xgm5-85mh-3559
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.
GHSA-27xx-c7vg-hjjj
When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2026-12246 NSD version 4.14.0 introduced a bug where a specially crafted APL RR, ... | CVSS3: 8.1 | 0% Низкий | 5 месяцев назад |
| GHSA-xgm5-85mh-3559 NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes. | CVSS3: 8.1 | 0% Низкий | 5 месяцев назад |
| GHSA-27xx-c7vg-hjjj When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. However, no client certificate is needed when the request comes in over TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the other conditions of the provide-xfr rule match. | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу