https://seclists.org/oss-sec/2026/q4/163: NSD 4.15.3 security lease
Published Oct 14, 2026
·Updated
Affected Software
1 affected component
Nlnet Labs NSD=4.15.3
Frequently Asked Questions
1
Which record data can trigger the reported overflows?
The affected inputs are specially formatted base64 RDATA, crafted SVCB or HTTPS resource records, crafted HIP resource records, and specially formatted TXT-DATA RDATA.
2
What is the potential impact of successful exploitation?
Each listed issue is classified as high severity and as an RCE-class stack overwrite.
3
Is there a known patch baseline?
The supplied patches were tested to apply and work on NSD 4.15.2.