Threats tagged 'ghsa-qw4x-w9jf-pmv6'

Hickory DNS versions 0.25.0 up to but not including 0.26.2 have a vulnerability in the hickory-resolver component where irrelevant CNAME records are followed during recursive DNS queries. This causes the resolver to send unnecessary queries, potentially leading to query amplification. The flaw does not impact confidentiality or integrity but can cause availability issues due to increased query load.