Stack-based buffer overflow in NSD - CVE-2026-101341
Published: October 14, 2026
Vulnerability identifier: #VU155743
CSH Severity: Low
CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-101341
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to execute arbitrary commands.
The vulnerability exists due to a stack-based buffer overflow in the NSD zone file parser when parsing resource records containing specially formatted sequences of strings. A local user can supply a crafted zone file directly to NSD to execute arbitrary commands.
Zone files generated by NSD itself, including those for secondary zones, do not use the formatting required to trigger the vulnerability.
Affected software
NSD
Fedora
nsd
Fedora
nsd
How to mitigate CVE-2026-101341
Install security update from vendor's website.
NSD - update to 4.15.3
nsd - addressed in versions 4.15.3-1.el9, 4.15.3-1.el10_2, 4.15.3-1.el10_3, 4.15.3-1.el10_4, 4.15.3-1.fc43, 4.15.3-1.fc44, 4.15.3-1.fc45
nsd - addressed in versions 4.15.3-1.el9, 4.15.3-1.el10_2, 4.15.3-1.el10_3, 4.15.3-1.el10_4, 4.15.3-1.fc43, 4.15.3-1.fc44, 4.15.3-1.fc45