Apply the NLnet Labs NSD patch for 4 flaws, including CVE-2026-101341. Each NSD stack overwrite vulnerability risks remote command execution.
@securityonline.bsky.social
@securityonline.bsky.socialApply the NLnet Labs NSD patch for 4 flaws, including CVE-2026-101341. Each NSD stack overwrite vulnerability risks remote command execution.
@stackflag.bsky.socialCVE-2026-101341 - nsd
The NSD DNS server used in Debian can be caused to write beyond its memory limits when it processes specially crafted short text records. This can let an attacker overwrite a…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101339 - nsd
The NSD name server software from NLnet Labs and Debian can be caused to write over its own memory when it processes a specially crafted DNS record. This could let an attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101338 - nsd
The NSD DNS server can be forced to run attacker‑controlled data when it processes a specially crafted SVCB or HTTPS record that fills the expected data space. This can lead to…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101337 - nsd
If an attacker supplies a specially crafted base64 data field to NSD, the program can write up to 64 KB of attacker‑controlled data onto its internal memory stack. This risk…
Too many irrelevant or confusing CVEs? Use stackflag.com
@hendryadrian.bsky.socialUnbound DNSSEC validator before 1.26.1 has a critical heap overflow that can enable remote code execution via a malicious DNS zone. Version 1.26.1 fixes CVE-2026-81642 and other flaws. #Unbound #CVE-2026-81642 #NLnetLabs
@stackflag.bsky.socialCVE-2026-81642 - unbound
Unbound versions up to 1.26.0 can mishandle specially crafted DNSSEC keys, causing the program to stop working or potentially run attacker code. An attacker who controls a…
Too many irrelevant or confusing CVEs? Use stackflag.com