Threats tagged 'ghsa-g99j-j499-7pp4'

Multiple Hickory components prior to version 0.26.2 fail to properly canonicalize IPv4-mapped IPv6 addresses when enforcing deny_answers, deny_server, or AccessControlSet rules. This flaw allows attackers to bypass answer filtering, cause queries to denied nameservers, or access Hickory server deployments on dual-stack IPv6 sockets from clients that should be denied.