Threats tagged 'rustsec-2026-0520'

A vulnerability in Hickory net's DNSSEC validation allows acceptance of a validly signed but unrelated DNS resource record set (RRset) as a valid answer to a DNS query. The flaw occurs because the validation process did not verify that the signed records matched the queried name and type or a CNAME. This could enable an attacker who can manipulate DNS responses to substitute a signed RRset for a different name or type, misleading the resolver. The issue affects versions prior to 0.26.2 and is fixed in version 0.26.2.