CVE-2026-12246 – Out of bounds stack write with crafted APL RR

CVE ID :CVE-2026-12246

Published : 25. Juni 2026 05:24 | 2 Stunden, 20 Minuten ago

Description :NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…