Integer overflow in Nlnet Labs Nsd

CVE-2026-18916

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance.

EPSS: 0.003 (25.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References