VulnSocial

CVE-2026-19401General(nlnetlabs / nsd)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options (17 when UDP payload size is 512). By continuously crashing the serve childs, the remote client can severely hamper or, when positioned sufficiently close, deny all DNS service.

nlnetlabs CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-400CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nsd

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-08-27); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
nlnetlabs
Products
nsd

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-27: 1Mentions · 2026-08-30: 108-2708-30
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-08-271
General1
2026-08-301
Disclosure1
Full discourse2 posts
  • 日本レジストリサービス（JPRS）@JPRS_official
    General

    【注意喚起】NSDの脆弱性情報が公開されました（CVE-2026-18664、CVE-2026-18916、CVE-2026-19401、CVE-2026-19538） https://jprs.jp/tech/security/2026-08-27-nsd.html

    Post summary

    Several NSD CVEs have been announced, but no PoC, exploit, patch, or technical details are provided in the text.

    01130853
    1.3K followersView on X
  • 珈琲好き@likecoffee
    Disclosure

    NSDの脆弱性情報が公開されました （CVE-2026-18664、CVE-2026-18916、CVE-2026-19401、CVE-2026-19538） https://jprs.jp/tech/security/2026-08-27-nsd.html #%E6%8A%80%E8%A1%93%E7%B3%BB-%E8%B3%87%E6%96%99 #feedly

    Post summary

    The post announces that vulnerability information for NSD has been published, listing CVE-2026-18664, CVE-2026-18916, CVE-2026-19401, and CVE-2026-19538, and points to a JPRS web page for details.

    0000059
    1.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appnlnetlabsnsd---

Explore more

Back to dashboardnlnetlabs CVEsnsd vulnerabilities