Vulnerabilities in NLnet Labs

77 results
Vexday analysis

NLnet Labs apresenta volume elevado de vulnerabilidades recentes (20 das 40 CVEs nos últimos 90 dias), com 2 críticas catalogadas, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante (CWE-349) concentra os riscos em uma classe específica, sugerindo problemas sistemáticos que demandam remediação priorizada nos componentes afetados.

CVE-2023-0158HIGHTriggered crash on direct RRDP accessEPSS 0.7%CVE-2023-39914HIGHBER/CER/DER decoder panics on invalid inputEPSS 0.7%CVE-2023-39916CRITICALPossible path traversal when storing RRDP responsesEPSS 0.6%CVE-2023-39915HIGHCrashes on parsing certain invalid RPKI objectsEPSS 0.6%CVE-2026-49233HIGHRoutinator cache path traversal using rogue rsync URIsEPSS 0.5%CVE-2020-28935—Local symlink attack in Unbound and NSDEPSS 0.5%CVE-2026-12244HIGHHeap overflow and crash with crafted SVCB RREPSS 0.5%CVE-2026-85501MEDIUMRetrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSECEPSS 0.5%CVE-2026-80225MEDIUMPossible degradation of service from continuous queries on the same TCP/DoT connectionEPSS 0.5%CVE-2025-0638HIGHRoutinator crashes when illegal characters are present in manifest file namesEPSS 0.5%CVE-2026-32665HIGHRemote DNS-over-QUIC denial of service due to `quic-size` budget bypassEPSS 0.5%CVE-2026-50045MEDIUM'max-global-quota' reset by DNSSEC validation restartsEPSS 0.5%CVE-2026-55973HIGH'dns-error-reporting: yes' leads to stack buffer overflowEPSS 0.5%CVE-2026-12245HIGHDenial of DNS over TLS service by any DoT clientEPSS 0.5%CVE-2026-49235HIGHRoutinator crashes on specifically crafted RRDP XML filesEPSS 0.5%CVE-2026-40691HIGHPacket of death for DNSCrypt over TCPEPSS 0.5%CVE-2026-81634HIGHPossible heap buffer overflow during DNSSEC canonicalizationEPSS 0.5%CVE-2026-12246HIGHOut of bounds stack write with crafted APL RREPSS 0.4%CVE-2026-49232HIGHRoutinator exits when accepting an incoming HTTP or RTR connection failsEPSS 0.4%CVE-2026-50251MEDIUMAttacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flushEPSS 0.4%