Threats tagged 'ghsa-4vjf-x5x5-8f5h'

The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2 is vulnerable to ghost domain name attacks. This occurs because the software reuses cached child-side apex NS RRsets from zone NS queries during iterative resolution. An attacker can exploit this by repeatedly querying a zone's NS records to keep stale RRsets cached indefinitely, allowing revoked name servers to continue answering for the zone.