Threats tagged 'ghsa-fcx4-92qj-2p7q'

Hickory DNS versions 0.25.0-alpha.3 through 0.25.2 have a query amplification vulnerability in the recursive resolver. This flaw arises from improper handling of cyclic sibling name server referrals that lack glue records, allowing attackers controlling two zones with mutually referencing name servers to cause the resolver to loop and generate many upstream queries. The amplification is worsened by zero-TTL NS records.