What is GHSA-m6mr-q7j3-3rc6?

GHSA-m6mr-q7j3-3rc6 is a security advisory published by GitHub Security Advisories with Medium severity. Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP...

Which CVE IDs does GHSA-m6mr-q7j3-3rc6 cover?

GHSA-m6mr-q7j3-3rc6 covers the following CVE IDs: CVE-2026-18916. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m6mr-q7j3-3rc6?

GHSA-m6mr-q7j3-3rc6 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-m6mr-q7j3-3rc6MediumCVSS 7.5

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP...

Vendor

GitHub Security Advisories

Published

September 1, 2026

Last Modified

September 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-18916 →

📋 Description

Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can denial all TCP service to this NSD instance.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18916
https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-18916.txt
https://github.com/advisories/GHSA-m6mr-q7j3-3rc6