Security1 hOctober 26, 2026, 22:42

Researchers propose hunting NSD exploitation attempts before an exploit exists

Four stack overwrite flaws in NSD 4.10.0–4.15.2 (CVE-2026-101337, -101338, -101339, -101341) were fixed in 4.15.3. With no public exploit or confirmed in-the-wild use, detection should focus on daemon crashes, zone-file changes and nsd-control reload calls rather than DNS queries.

DEV Community

Open source

Researchers propose hunting NSD exploitation attempts before an exploit exists

Flaws affect NSD 4.10.0–4.15.2 and require a crafted zone file fed to the parser
Fix shipped in NSD 4.15.3, with per-CVE diffs available for backports
Attack needs a file write into the zone directory plus a reload, not port 53 access
ZoomEye query for app="NSD" returned 116,266 assets; CVE-scoped query returned zero

#NSD#NLnetLabs

NSD 4.15.3 fixes four stack overwrites in zone file parser

Security

NSD parser flaws reachable via customer TXT records get patched

AI chatbots endorse existing climate policies twice as often as new proposals

Science

Researchers propose hunting NSD exploitation attempts before an exploit exists

NSD 4.15.3 fixes four stack overwrites in zone file parser

NSD parser flaws reachable via customer TXT records get patched

AI chatbots endorse existing climate policies twice as often as new proposals

Scientists propose hunting for Penrose process signatures at Sgr A*