Threats tagged 'ghsa-9rhf-mg7m-qfr9'

Hickory DNS hickory-resolver versions before 0.26.2 contain a vulnerability where an unbounded retry loop occurs in the NameServerPool::try_send function. This loop re-queues truncated DNS responses (TC=1) without verifying the transport or limiting retries. A malicious authoritative DNS server can exploit this by continuously sending truncated responses over a persistent TCP connection, causing the resolver to consume excessive resources until the request times out after 5 seconds.