Skip to content
OpenAdvisories

Vendor

NLnet Labs

98 known vulnerabilities.

Products

Unbound 58 Routinator 20 NSD 13 Krill 4 Net::DNS 2 ldns 1 bcder 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-81642 Public exploit

    Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

    In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2026-64193

    Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR

    Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDED_ERROR::_decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option (RFC 8914) by tokenising the raw bytes and passing the…

    NLnet Labs Net::DNS libnet-dns-perl libnet-dns-perl Debian Ubuntu
  • Critical 9.1
    CVE-2026-33278

    Possible arbitrary code execution during DNSSEC validation

    NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination p…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Critical 9.3
    CVE-2023-39916

    Possible path traversal when storing RRDP responses

    NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible path traversal vulnerability in the optional, off-by-default keep-rrdp-responses feature that allows users to store the content of respons…

    NLnet Labs Routinator routinator crates.io