Threats tagged 'ghsa-6w9h-68h2-v6xq'

Hickory DNS versions hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 have a DNSSEC validation flaw. The flaw causes the software to accept DNS responses as positive answers if any valid RRset is present in the answer section, without verifying that the RRset matches the query. This allows attackers to supply signed but unrelated RRsets, causing responses that lack matching records to be incorrectly validated as positive answers instead of no-data responses.