CVE-2026-18916

Remote TCP DoS by throttling the TCP receive window PUBLISHED

Description (CNA)

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance.

Affected (CNA)

Vendor / product	Versions
NLnet Labs / NSD	affected 3.2.11 before 4.15.1

CWE

CWE-191

References

https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-18916.txt

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.