NLNETLABS kayıtları
nlnetlabs üreticisine ait 108 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %95,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-416 Use After Free6
- CWE-399 Resource Management Errors6
- CWE-122 Heap-based Buffer Overflow5
- CWE-190 Integer Overflow or Wraparound5
- CWE-345 Insufficient Verification of Data Authenticity3
- CWE-20 Improper Input Validation3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
108 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
60Bu hafta | CVE-2023-50387Kavram kanıtı | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of serredhat · enterprise linux · CWE-770 | Yüksek7,5 | — | %99,9 | 14 Şub 2024 |
40Planlayın | CVE-2019-25034İstismar yok | Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write.nlnetlabs · unbound · CWE-190 | Kritik9,8 | — | %2,8 | 27 Nis 2021 |
40Planlayın | CVE-2019-25032İstismar yok | Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.nlnetlabs · unbound · CWE-190 | Kritik9,8 | — | %2,8 | 27 Nis 2021 |
40Planlayın | CVE-2019-25035İstismar yok | Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.nlnetlabs · unbound · CWE-787 | Kritik9,8 | — | %2,8 | 27 Nis 2021 |
40Planlayın | CVE-2019-25042İstismar yok | Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.nlnetlabs · unbound · CWE-787 | Kritik9,8 | — | %2,8 | 27 Nis 2021 |
40Planlayın | CVE-2019-25039İstismar yok | Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.nlnetlabs · unbound · CWE-190 | Kritik9,8 | — | %2,8 | 27 Nis 2021 |
40Planlayın | CVE-2019-25038İstismar yok | Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.nlnetlabs · unbound · CWE-190 | Kritik9,8 | — | %2,8 | 27 Nis 2021 |
40Planlayın | CVE-2017-1000231İstismar yok | A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.nlnetlabs · ldns · CWE-415 | Kritik9,8 | — | %2,6 | 17 Kas 2017 |
40Planlayın | CVE-2019-25033İstismar yok | Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.nlnetlabs · unbound · CWE-190 | Kritik9,8 | — | %2,3 | 27 Nis 2021 |
40Planlayın | CVE-2017-1000232İstismar yok | A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.nlnetlabs · ldns · CWE-415 | Kritik9,8 | — | %2,2 | 17 Kas 2017 |
40Planlayın | CVE-2019-13207İstismar yok | nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c.nlnetlabs · name server daemon · CWE-787 | Kritik9,8 | — | %2,0 | 3 Tem 2019 |
36İzleyin | CVE-2026-33278İstismar yok | Possible arbitrary code execution during DNSSEC validationnlnetlabs · unbound · CWE-416 | Kritik9,1 | — | %1,4 | 20 May 2026 |
36İzleyin | CVE-2026-81642Kavram kanıtı | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEYnlnetlabs · unbound · CWE-122 | Kritik9,1 | — | %0,9 | 16 Eyl 2026 |
34İzleyin | CVE-2026-42944İstismar yok | Heap overflow with multiple NSID, COOKIE, PADDING EDNS optionsnlnetlabs · unbound · CWE-197 | Yüksek8,7 | — | %0,8 | 20 May 2026 |
34İzleyin | CVE-2026-42959İstismar yok | Crash during DNSSEC validation of malicious contentnlnetlabs · unbound · CWE-824 | Yüksek8,7 | — | %0,8 | 20 May 2026 |
34İzleyin | CVE-2026-12244İstismar yok | Heap overflow and crash with crafted SVCB RRnlnetlabs · nsd · CWE-122 | Yüksek8,7 | — | %0,4 | 25 Haz 2026 |
34İzleyin | CVE-2026-12245İstismar yok | Denial of DNS over TLS service by any DoT clientnlnetlabs · nsd · CWE-416 | Yüksek8,7 | — | %0,4 | 25 Haz 2026 |
34İzleyin | CVE-2026-49235İstismar yok | Routinator crashes on specifically crafted RRDP XML filesnlnetlabs · routinator · CWE-755 | Yüksek8,7 | — | %0,3 | 8 Haz 2026 |
33İzleyin | CVE-2026-82717İstismar yok | CNAME synthesis could lead to heap corruptionnlnetlabs · unbound · CWE-122 | Yüksek8,4 | — | %0,7 | 16 Eyl 2026 |
33İzleyin | CVE-2026-49233İstismar yok | Routinator cache path traversal using rogue rsync URIsnlnetlabs · routinator · CWE-22 | Yüksek8,3 | — | %0,4 | 8 Haz 2026 |
32İzleyin | CVE-2026-19401İstismar yok | Remote UDP DoS by sending multiple DNS Cookie optionsnlnetlabs · nsd · CWE-400 | Yüksek8,2 | — | %0,4 | 26 Ağu 2026 |
32İzleyin | CVE-2026-19538İstismar yok | Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLSnlnetlabs · nsd · CWE-290 | Yüksek8,2 | — | %0,4 | 26 Ağu 2026 |
32İzleyin | CVE-2026-18664İstismar yok | Wrong interpretation of ACL rangesnlnetlabs · nsd · CWE-284 | Yüksek8,2 | — | %0,4 | 26 Ağu 2026 |
32İzleyin | CVE-2026-49234İstismar yok | Routinator crashes on specifically crafted ASN strings in the APInlnetlabs · routinator · CWE-20 | Yüksek8,2 | — | %0,2 | 8 Haz 2026 |
32İzleyin | CVE-2026-12490İstismar yok | Bypass of client certificate verification with transfer over TLSnlnetlabs · nsd · CWE-284 | Yüksek8,2 | — | %0,2 | 25 Haz 2026 |
- CVE-2023-5038760Bu hafta
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser
YüksekCVSS 7,5Kavram kanıtıEPSS %99redhat · enterprise linux14 Şub 2024
- CVE-2019-2503440Planlayın
Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · unbound27 Nis 2021
- CVE-2019-2503240Planlayın
Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · unbound27 Nis 2021
- CVE-2019-2503540Planlayın
Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · unbound27 Nis 2021
- CVE-2019-2504240Planlayın
Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · unbound27 Nis 2021
- CVE-2019-2503940Planlayın
Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · unbound27 Nis 2021
- CVE-2019-2503840Planlayın
Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · unbound27 Nis 2021
- CVE-2017-100023140Planlayın
A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · ldns17 Kas 2017
- CVE-2019-2503340Planlayın
Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · unbound27 Nis 2021
- CVE-2017-100023240Planlayın
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · ldns17 Kas 2017
- CVE-2019-1320740Planlayın
nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c.
KritikCVSS 9,8İstismar yokEPSS %2nlnetlabs · name server daemon3 Tem 2019
- CVE-2026-3327836İzleyin
Possible arbitrary code execution during DNSSEC validation
KritikCVSS 9,1İstismar yokEPSS %1nlnetlabs · unbound20 May 2026
- CVE-2026-8164236İzleyin
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
KritikCVSS 9,1Kavram kanıtıEPSS %0nlnetlabs · unbound16 Eyl 2026
- CVE-2026-4294434İzleyin
Heap overflow with multiple NSID, COOKIE, PADDING EDNS options
YüksekCVSS 8,7İstismar yokEPSS %0nlnetlabs · unbound20 May 2026
- CVE-2026-4295934İzleyin
Crash during DNSSEC validation of malicious content
YüksekCVSS 8,7İstismar yokEPSS %0nlnetlabs · unbound20 May 2026
- CVE-2026-1224434İzleyin
Heap overflow and crash with crafted SVCB RR
YüksekCVSS 8,7İstismar yokEPSS %0nlnetlabs · nsd25 Haz 2026
- CVE-2026-1224534İzleyin
Denial of DNS over TLS service by any DoT client
YüksekCVSS 8,7İstismar yokEPSS %0nlnetlabs · nsd25 Haz 2026
- CVE-2026-4923534İzleyin
Routinator crashes on specifically crafted RRDP XML files
YüksekCVSS 8,7İstismar yokEPSS %0nlnetlabs · routinator8 Haz 2026
- CVE-2026-8271733İzleyin
CNAME synthesis could lead to heap corruption
YüksekCVSS 8,4İstismar yokEPSS %0nlnetlabs · unbound16 Eyl 2026
- CVE-2026-4923333İzleyin
Routinator cache path traversal using rogue rsync URIs
YüksekCVSS 8,3İstismar yokEPSS %0nlnetlabs · routinator8 Haz 2026
- CVE-2026-1940132İzleyin
Remote UDP DoS by sending multiple DNS Cookie options
YüksekCVSS 8,2İstismar yokEPSS %0nlnetlabs · nsd26 Ağu 2026
- CVE-2026-1953832İzleyin
Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
YüksekCVSS 8,2İstismar yokEPSS %0nlnetlabs · nsd26 Ağu 2026
- CVE-2026-1866432İzleyin
Wrong interpretation of ACL ranges
YüksekCVSS 8,2İstismar yokEPSS %0nlnetlabs · nsd26 Ağu 2026
- CVE-2026-4923432İzleyin
Routinator crashes on specifically crafted ASN strings in the API
YüksekCVSS 8,2İstismar yokEPSS %0nlnetlabs · routinator8 Haz 2026
- CVE-2026-1249032İzleyin
Bypass of client certificate verification with transfer over TLS
YüksekCVSS 8,2İstismar yokEPSS %0nlnetlabs · nsd25 Haz 2026