Nlnetlabs vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-64194 Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains.High 7.5 · Jul 20, 2026
• CVE-2026-64193 Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR.Critical 9.8 · Jul 20, 2026
• CVE-2020-19861 When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file.High 7.5 · Jan 21, 2022
• CVE-2019-25042 Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.Critical 9.8 · Apr 27, 2021
• CVE-2019-25041 Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy.High 7.5 · Apr 27, 2021
• CVE-2019-25040 Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy.High 7.5 · Apr 27, 2021
• CVE-2019-25039 Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.Critical 9.8 · Apr 27, 2021
• CVE-2019-25038 Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.Critical 9.8 · Apr 27, 2021
• CVE-2019-25037 Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet.High 7.5 · Apr 27, 2021
• CVE-2019-25036 Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname.High 7.5 · Apr 27, 2021
• CVE-2019-25035 Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.Critical 9.8 · Apr 27, 2021
• CVE-2019-25034 Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write.Critical 9.8 · Apr 27, 2021
• CVE-2019-25033 Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.Critical 9.8 · Apr 27, 2021
• CVE-2019-25032 Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.Critical 9.8 · Apr 27, 2021
• CVE-2020-10772 An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414.High 7.5 · Nov 27, 2020
• CVE-2020-17366 An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1.High 7.4 · Aug 5, 2020
• CVE-2020-12663 Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.High 7.5 · May 19, 2020
• CVE-2020-12662 Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue.High 7.5 · May 19, 2020
• CVE-2019-18934 Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer.High 7.3 · Nov 19, 2019
• CVE-2019-16866 Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query.High 7.5 · Oct 3, 2019
• CVE-2019-13207 nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c.Critical 9.8 · Jul 3, 2019
• CVE-2017-1000232 A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.Critical 9.8 · Nov 16, 2017
• CVE-2017-1000231 A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.Critical 9.8 · Nov 16, 2017
• CVE-2016-6173 NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimiteHigh 7.5 · Feb 9, 2017
• CVE-2009-3602 Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS sHigh 7.5 · Oct 13, 2009