Threats tagged 'ghsa-5p73-2jm7-2cmq'

A vulnerability in hickory-dns recursor versions 0.25.0-alpha.3 through 0.25.2 and hickory-resolver versions before 0.26.2 allows remote attackers to cause resource exhaustion. The issue arises because the recursor iterates every out-of-bailiwick NS target lacking glue records in a referral without limiting per-query work. This can be exploited to amplify traffic against remote servers or exhaust recursor resources, leading to denial of service.