Vulnerability Details CVE-2026-18916
Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 26.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-18916
-
cpe:2.3:a:nlnetlabs:nsd:3.2.15
-
cpe:2.3:a:nlnetlabs:nsd:4.0.1
-
cpe:2.3:a:nlnetlabs:nsd:4.0.2
-
cpe:2.3:a:nlnetlabs:nsd:4.0.3
-
cpe:2.3:a:nlnetlabs:nsd:4.1.0
-
cpe:2.3:a:nlnetlabs:nsd:4.1.1
-
cpe:2.3:a:nlnetlabs:nsd:4.1.10
-
cpe:2.3:a:nlnetlabs:nsd:4.1.11
-
cpe:2.3:a:nlnetlabs:nsd:4.1.12
-
cpe:2.3:a:nlnetlabs:nsd:4.1.13
-
cpe:2.3:a:nlnetlabs:nsd:4.1.14
-
cpe:2.3:a:nlnetlabs:nsd:4.1.15
-
cpe:2.3:a:nlnetlabs:nsd:4.1.16
-
cpe:2.3:a:nlnetlabs:nsd:4.1.17
-
cpe:2.3:a:nlnetlabs:nsd:4.1.18
-
cpe:2.3:a:nlnetlabs:nsd:4.1.19
-
cpe:2.3:a:nlnetlabs:nsd:4.1.2
-
cpe:2.3:a:nlnetlabs:nsd:4.1.20
-
cpe:2.3:a:nlnetlabs:nsd:4.1.21
-
cpe:2.3:a:nlnetlabs:nsd:4.1.22
-
cpe:2.3:a:nlnetlabs:nsd:4.1.23
-
cpe:2.3:a:nlnetlabs:nsd:4.1.24
-
cpe:2.3:a:nlnetlabs:nsd:4.1.25
-
cpe:2.3:a:nlnetlabs:nsd:4.1.26
-
cpe:2.3:a:nlnetlabs:nsd:4.1.27
-
cpe:2.3:a:nlnetlabs:nsd:4.1.3
-
cpe:2.3:a:nlnetlabs:nsd:4.1.4
-
cpe:2.3:a:nlnetlabs:nsd:4.1.5
-
cpe:2.3:a:nlnetlabs:nsd:4.1.6
-
cpe:2.3:a:nlnetlabs:nsd:4.1.7
-
cpe:2.3:a:nlnetlabs:nsd:4.1.8
-
cpe:2.3:a:nlnetlabs:nsd:4.1.9
-
cpe:2.3:a:nlnetlabs:nsd:4.10.0
-
cpe:2.3:a:nlnetlabs:nsd:4.10.1
-
cpe:2.3:a:nlnetlabs:nsd:4.11.0
-
cpe:2.3:a:nlnetlabs:nsd:4.11.1
-
cpe:2.3:a:nlnetlabs:nsd:4.12.0
-
cpe:2.3:a:nlnetlabs:nsd:4.12.1
-
cpe:2.3:a:nlnetlabs:nsd:4.13.0
-
cpe:2.3:a:nlnetlabs:nsd:4.14.0
-
cpe:2.3:a:nlnetlabs:nsd:4.14.1
-
cpe:2.3:a:nlnetlabs:nsd:4.14.2
-
cpe:2.3:a:nlnetlabs:nsd:4.14.3
-
cpe:2.3:a:nlnetlabs:nsd:4.2.0
-
cpe:2.3:a:nlnetlabs:nsd:4.2.1
-
cpe:2.3:a:nlnetlabs:nsd:4.2.2
-
cpe:2.3:a:nlnetlabs:nsd:4.2.3
-
cpe:2.3:a:nlnetlabs:nsd:4.2.4
-
cpe:2.3:a:nlnetlabs:nsd:4.3.0
-
cpe:2.3:a:nlnetlabs:nsd:4.3.1
-
cpe:2.3:a:nlnetlabs:nsd:4.3.2
-
cpe:2.3:a:nlnetlabs:nsd:4.3.3
-
cpe:2.3:a:nlnetlabs:nsd:4.3.4
-
cpe:2.3:a:nlnetlabs:nsd:4.3.5
-
cpe:2.3:a:nlnetlabs:nsd:4.3.6
-
cpe:2.3:a:nlnetlabs:nsd:4.3.7
-
cpe:2.3:a:nlnetlabs:nsd:4.3.8
-
cpe:2.3:a:nlnetlabs:nsd:4.3.9
-
cpe:2.3:a:nlnetlabs:nsd:4.4.0
-
cpe:2.3:a:nlnetlabs:nsd:4.5.0
-
cpe:2.3:a:nlnetlabs:nsd:4.6.0
-
cpe:2.3:a:nlnetlabs:nsd:4.6.1
-
cpe:2.3:a:nlnetlabs:nsd:4.7.0
-
cpe:2.3:a:nlnetlabs:nsd:4.8.0
-
cpe:2.3:a:nlnetlabs:nsd:4.9.0
-
cpe:2.3:a:nlnetlabs:nsd:4.9.1