CVE-2026-101339
Description
A flaw was found in NSD. When parsing directly supplied zone files, a specially crafted Host Identity Protocol (HIP) resource record can cause a stack-based buffer overflow. An attacker capable of provisioning or feeding zone files into the server can exploit this vulnerability to execute arbitrary code or cause a denial of service (DoS).
Statement
This vulnerability is rated as an Important severity flaw because an attacker capable of manipulating zone configuration files can achieve arbitrary code execution or terminate the service, potentially compromising the host. Exploitation is constrained by the prerequisite that zone definitions must be directly provided, as zones automatically maintained and written by NSD via zone transfer mechanisms are not susceptible. Additionally, NSD is not included in Red Hat Enterprise Linux core repositories and is only available through community-supported channels such as EPEL.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
