Threats tagged 'ghsa-mhgq-ww4c-c9h8'

A vulnerability in the recursive resolver of Hickory DNS affects all versions of the hickory-recursor crate and hickory-resolver versions before 0.26.2. The resolver caches an empty connection pool when it encounters a referral without glue records and all IP address queries for the name servers fail. An attacker capable of spoofing DNS responses can exploit this to cause lookup failures for the affected zone until the cache entry expires or is evicted.