CVE-2026-12245 — Denial of DNS over TLS service by any DoT client

CVE-2026-12245

Denial of DNS over TLS service by any DoT client PUBLISHED

Description (CNA)

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.

Affected (CNA)

Vendor / product	Versions
NLnet Labs / NSD	affected 4.13.0 before 4.14.3

CWE

CWE-416

References

https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-12245.txt

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.