ALPINE-CVE-2026-12246
ALPINE-CVE-2026-12246
This page contains facts from public vulnerability sources. Check the original advisory before updating.
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.
CVSS 8.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nsd Alpine:v3.24
- Affected ranges
- ECOSYSTEM: ≥ 4.14.0, < 4.14.3-r0
Update to 4.14.3-r0