Threats tagged 'ghsa-jcq8-9rwq-2c6j'

A denial of service vulnerability exists in Hickory DNS hickory-proto versions from 0.3.1 before 0.26.1. The flaw is in the BinEncoder component, where remote attackers can cause CPU exhaustion by sending specially crafted DNS messages that trigger quadratic-time name compression. This leads to repeated linear scans during encoding, amplifying CPU resource consumption and causing service disruption.