Threats tagged 'ghsa-v49p-x2x5-v8xm'

A vulnerability in the hickory-net crate of Hickory DNS versions 0.26.0 up to but not including 0.26.2 causes the service to stop listening and return an error when receiving malformed UDP datagrams that cannot be parsed as DNS messages. Attackers who can guess the source port of a query, even without knowing the transaction ID, can send spoofed malformed responses to abort client queries, resulting in denial of service.