High severity8.1NVD Advisory· Published Jun 25, 2026· Updated Jun 26, 2026

CVE-2026-12246

Description

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nlnetlabs/Nsd
cpe:2.3:a:nlnetlabs:nsd:*:*:*:*:*:*:*:*
Range: >=4.14.0,<4.14.3
osv-coords2 versions
pkg:rpm/opensuse/nsd&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/nsd&distro=openSUSE%20Tumbleweed
< 4.14.3-bp160.1.1+ 1 more
- (no CPE)range: < 4.14.3-bp160.1.1
- (no CPE)range: < 4.14.3-1.1

Patches

Vulnerability mechanics

References

www.nlnetlabs.nl/downloads/nsd/CVE-2026-12246.txtnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000