Maven/dnsjava:dnsjava: medium 6.5
DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks
Action: Upgrade dnsjava:dnsjava to 3.6.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.0 | 3.6.0 | - |
Fixed versions
| 3.6.0 |
Sources
- osv: GHSA-crjg-w57m-rqqf
- https://github.com/dnsjava/dnsjava/security/advisories/GHSA-crjg-w57m-rqqf
- https://nvd.nist.gov/vuln/detail/CVE-2023-50387
- https://github.com/dnsjava/dnsjava/commit/07ac36a11578cc1bce0cd8ddf2fe568f062aee78
- https://github.com/dnsjava/dnsjava/commit/3ddc45ce8cdb5c2274e10b7401416f497694e1cf
- https://github.com/advisories/GHSA-8459-gg55-8qjj
- https://github.com/dnsjava/dnsjava
published · modified · JSON