CVE-2016-6173

Description

References

• nlnetlabs.nl/svn/nsd/tags/NSD_4_1_11_REL/doc/RELNOTES · Release Notes
• openwall.com/lists/oss-security/2016/07/06/3 · Mailing List
• openwall.com/lists/oss-security/2016/07/06/4 · Mailing List
• securityfocus.com/bid/91678 · Third Party Advisory
• sischkg/xfer-limit · Third Party Advisory
• lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html · Third Party Advisory
• open.nlnetlabs.nl/pipermail/nsd-users/2016-August/002342.html · Release Notes
• nlnetlabs.nl/bugs-script/show_bug.cgi · Issue Tracking

nsd의 다른 취약점

• CVE-2026-19538높음 7.5The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when conne…
• CVE-2026-19401높음 7.5Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tu…
• CVE-2026-18916높음 7.5Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve ch…
• CVE-2026-18664심각 9.1When ranges are used for access control (i.e. of the form 1.2.3.4-1.2.3.25), because NSD wrongly compares the IP address with the range on l…
• CVE-2026-12490높음 7.5When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a client certificate with that name. Howe…