CVE-2026-101341

Name of the Vulnerable Software and Affected Versions NSD (affected versions not specified)

Description Tokens of text in RDATA, such as those found in TXT records, that are under 32 bytes are not verified to remain within the reserved space. This leads to arbitrary sized out-of-bound stack writes, which can allow the overwrite of a callback function pointer called immediately after parsing. This issue occurs when zone files are fed directly to NSD, such as those from an operator-controlled provisioning system, rather than files written by NSD itself. This flaw risks remote command execution.

Recommendations Apply the NLnet Labs NSD patch.