Vulnerabilities

By sending specific queries to the resolver, an attacker can cause named to crash.

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak.

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak.

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.