Vulnerabilidades em NLnet Labs
40 resultadosCVE-2025-0638HIGHRoutinator crashes when illegal characters are present in manifest file namesEPSS 0.5%CVE-2026-49233HIGHRoutinator cache path traversal using rogue rsync URIsEPSS 0.4%CVE-2026-41292MEDIUMLong list of incoming EDNS options degrades performanceEPSS 0.4%CVE-2026-44390MEDIUMUnbounded name compression in certain cases causes degradation of serviceEPSS 0.4%CVE-2026-49235HIGHRoutinator crashes on specifically crafted RRDP XML filesEPSS 0.4%CVE-2026-42534MEDIUMJostle logic bypass degrades resolution performanceEPSS 0.4%CVE-2026-42923MEDIUMDegradation of service with unbounded NSEC3 hash calculationsEPSS 0.3%CVE-2026-32792MEDIUMPacket of death with DNSCryptEPSS 0.3%CVE-2026-49232HIGHRoutinator exits when accepting an incoming HTTP or RTR connection failsEPSS 0.3%CVE-2025-11411MEDIUMPossible domain hijacking via promiscuous records in the authority sectionEPSS 0.3%CVE-2026-12244HIGHHeap overflow and crash with crafted SVCB RREPSS 0.3%CVE-2026-12245HIGHDenial of DNS over TLS service by any DoT clientEPSS 0.3%CVE-2026-12246HIGHOut of bounds stack write with crafted APL RREPSS 0.3%CVE-2026-49234HIGHRoutinator crashes on specifically crafted ASN strings in the APIEPSS 0.3%CVE-2026-44608MEDIUMUse after free and crash under special conditions in RPZ codeEPSS 0.3%CVE-2026-42960MEDIUMPossible cache poisoning via promiscuous records for the authority sectionEPSS 0.2%CVE-2025-5994HIGHCache poisoning via the ECS-enabled Rebirthday AttackEPSS 0.2%CVE-2026-40622MEDIUMAnother 'ghost domain names' attack variantEPSS 0.2%CVE-2026-10846HIGHInsufficient verification that responses belong to a queryEPSS 0.1%CVE-2026-12490HIGHBypass of client certificate verification with transfer over TLSEPSS 0.1%