Threats tagged 'ghsa-p5hq-5ppr-f8g2'

Hickory DNS (hickory-server) versions 0.25.0 up to but not including 0.26.2 have a vulnerability in their validating recursive resolver and validating forwarder. They fail to verify that the SOA record included in NXDOMAIN or NODATA responses has passed DNSSEC validation. This flaw allows an attacker who can supply forged DNS responses to cause clients to receive a forged SOA record with the AD bit set, potentially misleading clients that depend on DNSSEC validation.