Threats tagged 'rustsec-2026-0519'

A vulnerability in Hickory net's DNSSEC validation allows an attacker who can modify DNS responses to cause the validator to incorrectly accept an NXDOMAIN response for an existing empty non-terminal domain name. This occurs because the validator did not properly handle cases where the NSEC record's next domain name is lexically below the queried name, leading to acceptance of a forged NXDOMAIN response. The issue affects versions prior to 0.26.2 and has been fixed in version 0.26.2.