VulnSocial

CVE-2026-101341

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which are written out by NSD itself, such for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlled provisioning system).

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-15: 210-15
Referenced assets2 URLs
Full discourse2 posts
  • 日本レジストリサービス（JPRS）@JPRS_official

    NSDの脆弱性情報が公開されました（CVE-2026-101337、CVE-2026-101338、CVE-2026-101339、CVE-2026-101341） https://jprs.jp/tech/security/2026-10-15-nsd.html

    03030375
    1.3K followersView on X
  • Daily CyberSecurity@Daily_CyberSec

    Apply the NLnet Labs NSD patch for 4 flaws, including CVE-2026-101341. Each NSD stack overwrite vulnerability risks remote command execution. #NSD #NLnetLabs #DNS #Cybersecurity #Vulnerability #InfoSec https://securityonline.info/nsd-stack-overwrite-vulnerability-patched/

    00010280
    13.0K followersView on X

Explore more

Back to dashboard