CVE-2026-19538
CVE-2026-19538 · Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sending the query twice on connection that is kept open.
CVSS 8.2 · High · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nsd
- Versions
- ≥ 4.8.0, < 4.15.1: Affected (semver)
Update to 4.15.1
nsd Debian:12
- Versions
- 4.10.1-1
- 4.10.1~rc2-1
- 4.10.1~rc2-2
- 4.11.0-1
- 4.11.1-1
- 4.12.0-1
- 4.12.0-2
- 4.13.0-1
- 4.13.0-2
- 4.13.0-3
- 4.13.0-4
- 4.13.0-5
- 4.13.0-6
- 4.14.0-1
- 4.14.1-1
- 4.14.2-1
- 4.14.3-1
- 4.15.0-1
- 4.15.0~rc1-1
- 4.15.1-1
- 4.15.2-1
- 4.6.1-1
- 4.7.0-1
- 4.8.0-1
- 4.9.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Debian:13
- Versions
- 4.12.0-1
- 4.12.0-2
- 4.13.0-1
- 4.13.0-2
- 4.13.0-3
- 4.13.0-4
- 4.13.0-5
- 4.13.0-6
- 4.14.0-1
- 4.14.1-1
- 4.14.2-1
- 4.14.3-1
- 4.15.0-1
- 4.15.0~rc1-1
- 4.15.1-1
- 4.15.2-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Debian:14
- Versions
- 4.12.0-1
- 4.12.0-2
- 4.13.0-1
- 4.13.0-2
- 4.13.0-3
- 4.13.0-4
- 4.13.0-5
- 4.13.0-6
- 4.14.0-1
- 4.14.1-1
- 4.14.2-1
- 4.14.3-1
- 4.15.0-1
- 4.15.0~rc1-1
- Affected ranges
- ECOSYSTEM: < 4.15.1-1
Update to 4.15.1-1
nsd Ubuntu:Pro:16.04:LTS
- Versions
- 4.1.2-1
- 4.1.6-1
- 4.1.7-1
- 4.1.7-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Ubuntu:Pro:18.04:LTS
- Versions
- 4.1.16-1build1
- 4.1.17-1
- 4.1.17-1build1
- 4.1.17-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Ubuntu:Pro:20.04:LTS
- Versions
- 4.1.26-1
- 4.1.26-1build1
- 4.1.26-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Ubuntu:Pro:22.04:LTS
- Versions
- 4.3.5-1
- 4.3.7-1
- 4.3.8-1
- 4.3.8-1build1
- 4.3.9-1
- 4.3.9-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Ubuntu:Pro:24.04:LTS
- Versions
- 4.7.0-1
- 4.8.0-1
- 4.8.0-1build1
- 4.8.0-1build3
- 4.8.0-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Ubuntu:26.10
- Versions
- 4.14.0-1
- 4.14.2-1
- 4.14.3-1
- 4.15.0-1
- 4.15.0-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
nsd Ubuntu:Pro:26.04:LTS
- Versions
- 4.12.0-1
- 4.13.0-6
- 4.14.0-1
- 4.14.0-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published