Threats tagged 'ghsa-p8hx-6263-88h9'

Hickory DNS versions from 0.26.0 up to but not including 0.26.2 contain an integer underflow vulnerability in the TSIG RDATA decoding process. This flaw allows remote attackers to send specially crafted TSIG records in DNS wire format that trigger an unchecked subtraction underflow, causing the software to panic and crash when overflow checks are enabled. The resulting denial of service impacts availability but does not affect confidentiality or integrity.