~ / search / GHSA-9jcx-pr2f-qvq5

GHSA-9jcx-pr2f-qvq5

miekg/dns parsing error leads to nil pointer dereference and DoS

Source: GitHub Advisory Database (reviewed) High CVE-2018-17419

Packages

EcosystemPackageAffectedFixed in
Go github.com/miekg/dns < 1.0.10 1.0.10

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in `setTA` in `scan_rr.go` in the Miek Gieben DNS library before 1.0.10 for Go. A `dns.ParseZone()` parsing error causes a segmentation violation, leading to denial of service.

References

External links from the advisory. They lead to third-party sites.