Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/07 2:59 a.m.23 views

hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

During message encoding, hickory-proto's BinEncoder stores pointers to labels that are candidates for name compression in a Vec. The name compression logic then searches for matches with a linear scan. A malicious message with many records can both introduce many candidate labels, and invoke this...

5.3CVSS6.8AI score0.00801EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder