Skip to content
OpenAdvisories

Package · Debian

lua-nginx-dns

1 known vulnerabilities.

1 result · Feed

  • Low 3.7

    OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing

    OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_name() that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can …