Debian/nsd: unknown
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data
Action: Upgrade nsd to 4.15.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.15.3-1 | - |
Fixed versions
| 4.15.3-1 |
Sources
- osv: DEBIAN-CVE-2026-101338#Debian:14/nsd
- https://security-tracker.debian.org/tracker/CVE-2026-101338
published · modified · JSON