crates.io/hickory-resolver: high
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
Action: Upgrade hickory-resolver to 0.26.2 or later.
cargo update -p hickory-resolver --precise 0.26.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.26.0-beta.1 | 0.26.2 | - |
Fixed versions
| 0.26.2 |
Sources
- osv: GHSA-6w6g-hm98-mhgm
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-6w6g-hm98-mhgm
- https://github.com/hickory-dns/hickory-dns/pull/3871
- https://github.com/hickory-dns/hickory-dns/commit/0848d2e9e4183499343318a690d6dd5e48bc21c1
- https://github.com/hickory-dns/hickory-dns/commit/5d37e2e04a36a87013a213b58b820345ef76a263
- https://github.com/hickory-dns/hickory-dns
- https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2
published · modified · JSON