Threats tagged 'ghsa-2vx4-5gxp-vmjw'

A vulnerability in the DNSSEC validation of the Hickory DNS hickory-net crate versions 0.26.0 up to but not including 0.26.2 allows attackers who can supply DNS responses to forge the nonexistence of any resource record set (RRset). This is achieved by combining a genuine NSEC record and its RRSIG with a crafted SOA record that is accepted even if it fails validation.