Threats tagged 'ghsa-jvpj-j4xv-2492'

A vulnerability exists in Hickory DNS hickory-proto versions 0.25.0-alpha.3 through 0.25.2 and hickory-net versions before 0.26.1 involving an unbounded loop in the DnssecDnsHandle NSEC3 closest-encloser proof validation. This occurs when the SOA owner is not an ancestor of the QNAME, allowing upstream attackers to send NoData or NXDomain responses with a cross-zone SOA record that can cause panic in debug builds or memory exhaustion in release builds.