Detections
Analytics
Alpine: multiple nsd packages: security update to 4.14.3-r0
high Tenable Cloud Security Plugin ID 443923
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR
containing a DNS message with a special crafted SVCB RR with an rdata size of 65512, that let's an
(uint16_t) variable that is used to allocate space needed for the RR wrap (because total size > 65535),
causing a heap overflow. The attacker can perform a controlled (RCE class) head write of up to 65509 bytes
(CVE-2026-12244)
- NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a
crash of the server process, which can be triggered trivially by sending a DNS query over a DoT
connection, and closing the connection without reading the response. (CVE-2026-12245)
- NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than
permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum
of 111 attacker controlled bytes. (CVE-2026-12246)
- When a provide-xfr is given with a tls-auth-name, a secondary requesting a transfer should provide a
client certificate with that name. However, no client certificate is needed when the request comes in over
TLS over the regular tls-port (and not the tls-auth-port) or over over TCP over the regular port, when the
other conditions of the provide-xfr rule match. (CVE-2026-12490)
Solution
Update the nsd library and its related packages to version 4.14.3-r0 or later.See Also
https://security.alpinelinux.org/vuln/CVE-2026-12244
https://security.alpinelinux.org/vuln/CVE-2026-12245
Plugin Details
Severity: High
ID: 443923
Version: Revision 1.3
Type: Local
Published: 6/25/2026
Updated: 6/29/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 6.7
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-12244
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.7
Threat Score: 6.6
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2026-12245
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 6/25/2026
Reference Information
CVE: CVE-2026-12244, CVE-2026-12245, CVE-2026-12246, CVE-2026-12490