Threats tagged 'ghsa-h794-62hf-9phh'

A vulnerability in the hickory-net crate of Hickory DNS versions 0.26.0-beta.1 up to but not including 0.26.2 allows DNSSEC validation bypass. This occurs because the Name's hash function ignores label lengths and the ValidationCacheKey compares only that hash. An attacker controlling an unsigned delegation differing only in dot positions from a signed target can cause an Insecure verdict, leading to forged DNS answers bypassing signature verification.