NLnet Labs vulnerabilities
We track 48 vulnerabilities in NLnet Labs products across 6 products. 48 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest NLnet Labs vulnerabilities
- 8.7 High severity
Unbound: Acceptance of Extraneous Untrusted Data With Trusted Data
A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send EC
- 7.5 High severity
Routinator: Improper Validation of Syntactic Correctness of Input
The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.
- 7.5 High severity
Unbound: Loop with Unreachable Exit Condition
NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite loop. Unbound 1.18.0 introduced a feature that removes EDE records from responses
- 7.5 High severity
Routinator: Improper Handling of Undefined Values
NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914.
- 7.5 High severity
bcder: Improper Handling of Undefined Values
NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delaye
- 7.5 High severity
Krill: Uncaught Exception
NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" endpoint. Prior to 0.12.1 a direct query for any existing directory under "/rrdp/", rather than an RRDP file such as "/rrdp/notification.xml"
- 7.5 High severity
Unbound: Uncontrolled Resource Consumption
A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The a
- 7.5 High severity
Routinator: Improper Handling of Unexpected Data Type
In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error and causes Routinator to exit. Worst case impact of this vulne