GHSA-9jcx-pr2f-qvq5HighCVSS 7.5

miekg/dns parsing error leads to nil pointer dereference and DoS

Published
May 18, 2021
Last Modified
May 20, 2024

🔗 CVE IDs covered (1)

CVE-2018-17419 →

📋 Description

An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone() parsing error causes a segmentation violation, leading to denial of service.

🎯 Affected products1

  • go/github.com/miekg/dns:< 1.0.10

🔗 References (6)