Stack Overflow Vulnerability in NSD by NLnet Labs
CVE-2026-101339

8.7HIGH

Key Information:

Vendor

Nlnet Labs

Status
Nsd
Vendor
CVE Published:
14 October 2026

What is CVE-2026-101339?

An identified vulnerability in NSD pertains to a stack overflow scenario triggered by a HIP resource record that approaches its RDATA limit. When this occurs simultaneously with the presence of another DNAME RDATA field, intended for a HIP Rendezvous server, it allows for the potential overwriting of the stack with up to 191 bytes of data manipulated by an attacker. This vulnerability primarily affects zone files processed directly by NSD, particularly in situations where the instance operates as a secondary source. Operators must be vigilant in monitoring how these zone files are provisioned to avert exploitation risks.

Affected Version(s)

NSD 4.10.0 < 4.15.3

References

https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Qifan Zhang from Palo Alto Networks
Alwaleed Ashi (LXR) <waleed.9998@hotmail.com>
.