| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-101341 | vulnerable | vulnerable | fixed | fixed | Tokens of text in RDATA (of for example TXT records) under 32 bytes ar ... |
| CVE-2026-101339 | vulnerable | vulnerable | fixed | fixed | A HIP resource record that fills the RDATA near or at is limit, and ha ... |
| CVE-2026-101338 | vulnerable | vulnerable | fixed | fixed | When a SVCB or HTTPS RR has filled the wire format RDATA up to the bri ... |
| CVE-2026-101337 | vulnerable | vulnerable | fixed | fixed | When base64 data is split up in pieces, of 3 character or less, tokens ... |
| CVE-2026-19538 | vulnerable | vulnerable | fixed | fixed | The BLOCKED access control list items that are evaluated to deny acces ... |
| CVE-2026-19401 | vulnerable | vulnerable | fixed | fixed | Any remote client can crash a (debugging/non-release build type) NSD s ... |
| CVE-2026-18916 | vulnerable | vulnerable | fixed | fixed | Any remote client can crash a NSD serve child, by throttling the TCP r ... |
| CVE-2026-18664 | vulnerable | vulnerable | fixed | fixed | When ranges are used for access control (i.e. of the form 1.2.3.4-1.2. ... |
| CVE-2026-12490 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | When a provide-xfr is given with a tls-auth-name, a secondary requesti ... |