CVE-2026-101341 Details
Description
Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which are written out by NSD itself, such for zones for which the NSD instance is secondary, will not be formatted like this. The zone file must be fed to NSD directly, (but it could come, for example, from an operator controlled provisioning system).
A vulnerability in NSD versions 4.10.0 through 4.15.2 allows for out-of-bounds stack writes in the RDATA of certain resource records, such as TXT, NINFO, SPF, AVC, RESINFO, and WALLET. This vulnerability arises because tokens of text under 32 bytes are not properly checked, leading to arbitrary-sized writes that can overwrite a callback function pointer. Exploitation of this vulnerability can result in the execution of arbitrary commands. The issue occurs when zone files are fed directly to NSD, potentially from an operator-controlled provisioning system.
Users can upgrade to NSD version 4.15.3, which includes the patch for this vulnerability. Alternatively, for users on NSD 4.15.2, the patch can be applied manually by downloading the patch file 'patch_CVE-2026-101341.diff', applying it to the NSD source directory with 'patch -p1 < patch_CVE-2026-101341.diff', and then running 'make install' to install NSD.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 14, 2026CISA-ADP
Assessed Oct 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| NLnet Labs NSD | >= 4.10.0, <= 4.15.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 14, 2026 | CVE Modified | CISA-ADP |
| Oct 14, 2026 | New CVE Received | [email protected] |