EUVD-2021-1531

Malware in sbrugna...

CVE-2018-20994

An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled...

actix-telepathy (>=0.5.4, <=0.6.1), agnostic (>=0.1.18, <=0.2.0) +59 more potentially affected by unknown CVE via trust-dns-proto (0.23.2)

trust-dns-proto CARGO version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on trust-dns-proto and may be impacted: - actix-telepathy =0.5.4, =0.1.18, =0.23.0-alpha.2, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.2 and more Source cves: unknown C...

RUSTSEC-2025-0017 The `trust-dns` project has been rebranded to `hickory-dns`

The trust-dns-proto crate is now available as hickory-proto...

GHSA-369H-PJR2-6WRH Uncontrolled recursion in trust-dns-proto

There's a stack overflow leading to a crash when Trust-DNS's parses a malicious DNS packet. Affected versions of this crate did not properly handle parsing of DNS message compression RFC1035 section 4.1.4. The parser could be tricked into infinite loop when a compression offset pointed back to th...

actix (>=0.5.0, <=0.5.8), actix-ogn (0.1.0) +12 more potentially affected by CVE-2018-20994 via trust-dns-proto (>=0.2.0, <=0.3.3)

trust-dns-proto CARGO version =0.2.0, =0.5.0, =1.4.0, =0.2.0, =0.1.0, =0.11.0, =0.7.0, =0.2.2, =0.7.0, =0.8.2 - zicsv-tool 0.1.0 Source cves: CVE-2018-20994 Source advisory: OSV:GHSA-369H-PJR2-6WRH...

Uncontrolled recursion in trust-dns-proto

There's a stack overflow leading to a crash when Trust-DNS's parses a malicious DNS packet. Affected versions of this crate did not properly handle parsing of DNS message compression RFC1035 section 4.1.4. The parser could be tricked into infinite loop when a compression offset pointed back to th...

CVE-2018-20994

An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled...

CVE-2018-20994

An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled...

CVE-2018-20994

CVE-2018-20994 affects the Rust crate trust-dns-proto prior to 0.5.0-alpha.3. The issue is infinite recursion/stack overflow caused by incorrect handling of DNS message compression (RFC1035 section 4.1.4). Connected advisories (e.g., RUSTSEC-2018-0007, GHSA-369H-PJR2-6WRH, Red Hat RH/CVE-2018-209...

CVE-2018-20994

An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled...

actix (>=0.5.0, <=0.5.8), actix-ogn (0.1.0) +12 more potentially affected by CVE-2018-20994 via trust-dns-proto (>=0.2.0, <=0.3.3)

trust-dns-proto CARGO version =0.2.0, =0.5.0, =1.4.0, =0.2.0, =0.1.0, =0.11.0, =0.7.0, =0.2.2, =0.7.0, =0.8.2 - zicsv-tool 0.1.0 Source cves: CVE-2018-20994 Source advisory: OSV:RUSTSEC-2018-0007...