[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgqPNzo0IExAjPbuDRy62-koNIEM3Vemr_wNfWM0wJ4M":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":55,"kevVulnerabilities":117,"topProductsByCves":118,"seoMetadata":126,"meta":135},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":54},21846,"nlnetlabs",7,53,0,392,"2024-10-03","n",[16,21,27,32,38,44,49],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},119427,"unbound",109,30,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},119426,"routinator",28,9,"2024-02-26",{"id":28,"product_name":29,"version_count":30,"cve_count":9,"kev_count":11,"last_cve_update":31},119423,"ldns",35,"2022-01-21",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},119425,"nsd",83,4,"2019-11-05",{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},119424,"name_server_daemon",102,2,"2020-12-07",{"id":45,"product_name":46,"version_count":42,"cve_count":47,"kev_count":11,"last_cve_update":48},119421,"bcder",1,"2023-09-13",{"id":50,"product_name":51,"version_count":52,"cve_count":47,"kev_count":11,"last_cve_update":53},119422,"krill",33,"2023-01-17","Nlnetlabs is a technology vendor with 7 tracked products and 53 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[56,65,73,79,84,90,95,100,106,111],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":63,"epssScore":64},"CVE-2023-50387","Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.","2024-02-14",7.5,"v3.1","High",false,0.99988,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":63,"epssScore":72},"CVE-2014-8602","iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a large or infinite number of referrals.","2014-12-11",4.3,"v2","Medium",0.32163,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":70,"severity":71,"isKev":63,"epssScore":78},"CVE-2012-2978","query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process crash) via a crafted DNS packet.","2012-07-27",5,0.09235,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":63,"epssScore":83},"CVE-2011-1922","daemon\u002Fworker.c in Unbound 1.x before 1.4.10, when debugging functionality and the interface-automatic option are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DNS request that triggers improper error handling.","2011-05-31",0.07085,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":70,"severity":71,"isKev":63,"epssScore":89},"CVE-2011-3581","Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns before 1.6.11 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Resource Record (RR) with an unknown type containing input that is longer than a specified length.","2011-11-04",6.8,0.04106,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":63,"epssScore":94},"CVE-2020-12663","Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.","2020-05-19",0.03588,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":63,"epssScore":99},"CVE-2019-16866","Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.","2019-10-03",0.03506,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":70,"severity":71,"isKev":63,"epssScore":105},"CVE-2009-1086","Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field.","2009-03-25",6.4,0.03473,{"cveId":107,"description":108,"publishedDate":37,"cvssScore":109,"cvssVersion":61,"severity":71,"isKev":63,"epssScore":110},"CVE-2013-5661","Cache Poisoning issue exists in DNS Response Rate Limiting.",5.9,0.0345,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":61,"severity":62,"isKev":63,"epssScore":116},"CVE-2019-18934","Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.","2019-11-19",7.3,0.03197,[],[119,120,121,122,123,124,125],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":9,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},{"id":45,"product_name":46,"version_count":42,"cve_count":47,"kev_count":11,"last_cve_update":48},{"id":50,"product_name":51,"version_count":52,"cve_count":47,"kev_count":11,"last_cve_update":53},{"title":127,"metaDescription":128,"keywords":129,"structuredData":130},"Nlnetlabs - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nlnetlabs covering 7 products with 53 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nlnetlabs vulnerabilities, Nlnetlabs security, Nlnetlabs CVE, Nlnetlabs threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":131,"@type":132,"name":133,"description":128,"url":134},"https:\u002F\u002Fschema.org","Organization","Nlnetlabs","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnlnetlabs",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":136,"apiVersion":137},"2026-10-17T15:45:32.707Z","3.0"]