high7.5
CVE-2026-18916
Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query.
Impact
Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nlnetlabs | Nsd | from 3.2.11 before 4.15.1 |