CVE-2026-18916— Remote TCP DoS by throttling the TCP receive window
Quick assessment
Affected
NLnet Labs NSD
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
任何远程客户端都可以通过在 TCP 查询后限制 TCP 接收窗口的大小，来导致 NSD 服务的子进程崩溃。通过持续使子进程崩溃，远程客户端可以拒绝该 NSD 实例的所有 TCP 服务。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| NLnet Labs | NSD | 3.2.11< 4.15.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-18916
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Remote TCP DoS by throttling the TCP receive window
Source: CVE Program / CVE List V5
Vulnerability Description
Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NLnet Labs | NSD | 3.2.11 ~ 4.15.1 | - |
|
II. Public POCs for CVE-2026-18916
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18916
请登录查看更多情报信息。
Other References for CVE-2026-18916 (1)
-
🔗 https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-18916.txt vendor-advisory
Same Patch Batch · NLnet Labs · 2026-08-26 · 4 CVEs total
| CVE-2026-18664 | 8.2 HIGH | Wrong interpretation of ACL ranges |
| CVE-2026-19401 | 8.2 HIGH | Remote UDP DoS by sending multiple DNS Cookie options |
| CVE-2026-19538 | 8.2 HIGH | Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS |
IV. Related Vulnerabilities
Same product: NSD
-
CVE-2026-19538
Bypass of BLOCKED ACL items on proxy protocol port over TCP -
CVE-2026-19401
Remote UDP DoS by sending multiple DNS Cookie options -
CVE-2026-18664
Wrong interpretation of ACL ranges -
CVE-2026-12490
Bypass of client certificate verification with transfer over -
CVE-2026-12246
Out of bounds stack write with crafted APL RR
Same vendor: NLnet Labs
-
CVE-2026-19538
Bypass of BLOCKED ACL items on proxy protocol port over TCP -
CVE-2026-19401
Remote UDP DoS by sending multiple DNS Cookie options -
CVE-2026-18664
Wrong interpretation of ACL ranges -
CVE-2026-56444
Degradation of resolution service when 'discard-timeout' and -
CVE-2026-56416
Possible heap buffer overflow when validator canonicalizes R
Same weakness: CWE-191
-
CVE-2026-76189
CAI Content Credentials | Integer Underflow (Wrap or Wraparo -
CVE-2026-71442
CAI Content Credentials | Integer Underflow (Wrap or Wraparo -
CVE-2026-71444
CAI Content Credentials | Integer Underflow (Wrap or Wraparo -
CVE-2026-16924
Vulnerabilities in IBM AIX and PowerVM VIOS -
CVE-2026-58087
Heap out-of-bounds access in semctl(2)
V. Comments for CVE-2026-18916
No comments yet