DirectorySecurity Advisories
Sign In
Security Advisories

CGA-m35f-vgjj-4rrc

Published

Last updated

https://images.chainguard.dev/security/CGA-m35f-vgjj-4rrc
Package

druid

Latest Update
Pending upstream fix
Aliases
  • GHSA-mmwx-rj87-vfgr

Severity

6.5

Medium

CVSS V3

Summary

DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources

Description

Impact

Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones.

Patches

Users should upgrade to dnsjava v3.6.0

Workarounds

Although not recommended, only using a non-validating resolver, will remove the vulnerability.

References

https://www.athene-center.de/en/keytrap

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images