Threats tagged 'ghsa-wgx4-v7mx-crxr'

Hickory DNS components hickory-net and hickory-proto have a vulnerability in DNSSEC verification where NSEC3 record names are insufficiently checked. The software compares only the hashed label without verifying that the record belongs to the correct DNS zone. This flaw allows attackers to supply NSEC3 records from other zones with matching hash labels to forge DNSSEC nonexistence proofs.