NSD 4.15.3 fixes four stack overwrites in zone file parser
NLnet Labs released NSD 4.15.3, patching four stack overwrite flaws in the zone file parser rated CVSS 8.7. They affect versions 4.10.0 through 4.15.2; CVE-2026-101339 can write up to 191 bytes past the stack boundary and may allow command execution.
- Flaws affect NSD 4.10.0 through 4.15.2, all rated CVSS 8.7
- CVE-2026-101339 writes up to 191 bytes past the stack boundary
- Risk applies only to zone files written by something other than NSD
- No in-the-wild exploitation or public exploit code reported
Read next
Security