CVE-2016-6173

High

Published: 09/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

NSD before 4.1.11 allows remote DNS master servers to cause a denial of service via a zone transfer with unlimited data, leading to /tmp disk consumption and slave server crash.

Risk Assessment

The organization may experience service outages in DNS, affecting resource availability and potentially leading to significant operational disruptions.

Recommendation

It is recommended to upgrade NSD to version 4.1.11 or later to mitigate this vulnerability.

Other vulnerabilities in NSD (Name Server Daemon)

CVE-2026-12244High
A vulnerability in NSD allows an attacker acting as a primary server for a zone to cause a heap overflow by sending an AXFR response containing a specially crafted SVCB record with an rdata size of 65512 bytes. This causes a uint16_t variable used for memory allocation to wrap, leading to a write beyond the allocated buffer.

Original NVD description (English source)

NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server crash) via a zone transfer with unlimited data.