Nlnetlabs

NLnetLabs develops a focused suite of DNS and DNSSEC infrastructure software—including Unbound resolver, Routinator RPKI validator, NSD nameserver, and related libraries—that occupies critical positions in recursive resolution and routing-security chains worldwide. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, reflecting the memory-safety and protocol-parsing demands of DNS software operating at scale. The exposure recurs across products through weakness classes including integer overflows, out-of-bounds writes, infinite loops, uncontrolled resource consumption, and improper exception handling; these flaws are characteristic of performance-sensitive network daemons written in C and tasked with parsing untrusted DNS traffic. Defenders should treat this vendor's security advisories as priority patches for recursive resolvers and DNSSEC infrastructure, since these services are foundational to recursive query chains and are frequently visible to untrusted networks. Current severity, exploitation activity, and exposure counts are shown alongside this summary.