CVE-2026-101341

High

Description

Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which are written out by NSD itself, such for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlled provisioning system).

SeverityHigh

CVSS8.7

Exploit probability—

ProductNSD

PublishedOct 14, 2026

First seenOct 14, 2026

Weakness typeCWE-121CWE-121

How to fix

Update

NLnet Labs NSD4.15.3 or later

Vendor advisories

nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt

Affected products

Product	Affected versions	Fixed in
NLnet Labs NSD	4.10.0 ≤ v < 4.15.3	4.15.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.