Skip to content
Threat Feed
Subscribe

Product

Hickory-Resolver (< 0.26.2)

1 brief RSS
high advisory

DNSSEC Validation Bypass in hickory-resolver

A vulnerability in hickory-resolver versions prior to 0.26.2 causes the library to ignore bogus DNSSEC proof states, allowing attackers to inject forged DNS records as validated data.

hickory-resolver dnssec vulnerability network-security
1t 1c