Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Resolution for Fedora 44 nsd Heap Overflow Denial of Service Issue

fedora
Calendar Grey July 4, 2026
Dist Fedora Esm H88
Critical advisory for Fedora 44 nsd fixing heap overflow and DoS vulnerabilities, detailed information included.
Fix for CVE-2026-12244: A specially crafted SVCB RR can cause a heap overflow of up to 65509 attacker controlled bytes

Summary

NSD is a complete implementation of an authoritative DNS name server.

For further information about what NSD is and what NSD is not please

consult the REQUIREMENTS document which is a part of this distribution.

Update Information:

Fix for CVE-2026-12244: A specially crafted SVCB RR can cause a heap overflow of up to 65509 attacker controlled bytes. Thanks to Qifan Zhang, Palo Alto Networks for the report https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-12244.txt Fix for CVE-2026-12245: If NSD is configured with DNS over TLS, a client that performs a TLS action, closing the connection early, causes a crash and restart of the server process. An attacker can keep all children in a crash-restart loop denying DoT service. Thanks to Qifan Zhang, Palo Alto Networks for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-12245.txt Fix for CVE-2026-12246: The RR type APL rdata address, if too large, causes out of bounds write on the stack, when the zonefile is written out. Thanks to Qifan Zhang from Palo Alto Networks, Haruki Oyama from Waseda University and zhangph for the report. https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-12246.txt Fix for CVE-2026-12490: Secondaries authenticated by a client...

Topics%20covered

Topics Covered

security advisory fedora critical DoS heap overflow DNS

Change Log

* Fri Jun 26 2026 Fabio Alessandro Locati - 4.14.3-1 - Update to 4.14.3. Fixes rhbz#2492647 * Fri Jun 12 2026 Yaakov Selkowitz - 4.14.2-2 - Rebuilt for openssl 4.0

References

Fedora Update Notification FEDORA-2026-dd3a7926a3 2026-07-05 01:07:02.694149+00:00 Name : nsd Product : Fedora 44 Version : 4.14.3 Release : 1.fc44 URL : http://www.nlnetlabs.nl/nsd/ Summary : Fast and lean authoritative DNS Name Server Description : NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dd3a7926a3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: nsd
Product: Fedora 44
Version: 4.14.3
Release: 1.fc44
URL: http://www.nlnetlabs.nl/nsd/
Summary: Fast and lean authoritative DNS Name Server

Topics%20covered

Topics Covered

security advisory fedora critical DoS heap overflow DNS

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here