https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T18:48:35.898901+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-19401 fkie_cve-2026-19401 2026-09-29T18:48:35.903314+00:00

Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 when UDP payload size is 512). By continuously crashing the serve childs, the remote client can severely hamper or, when positioned sufficiently close, deny all DNS service.

 https://vulnerability.circl.lu/vuln/ghsa-v29p-5fvf-m7p8 GHSA-v29p-5fvf-m7p8 2026-09-29T18:48:35.903463+00:00

Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 when UDP payload size is 512). By continuously crashing the serve childs, the remote client can severely hamper or, when positioned sufficiently close, deny all DNS service.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-19401 UBUNTU-CVE-2026-19401 2026-09-29T18:48:35.903513+00:00

Affected: Ubuntu:Pro:16.04:LTS: nsd, Ubuntu:Pro:18.04:LTS: nsd, Ubuntu:Pro:20.04:LTS: nsd, Ubuntu:Pro:22.04:LTS: nsd, Ubuntu:Pro:24.04:LTS: nsd, Ubuntu:Pro:26.04:LTS: nsd

Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 when UDP payload size is 512). By continuously crashing the serve childs, the remote client can severely hamper or, when positioned sufficiently close, deny all DNS service.