Skip to content
OpenAdvisories

Package · Maven

dnsjava:dnsjava

3 known vulnerabilities.

All Critical High Medium Low Exploited only

3 results · Feed

  • Medium 6.5
    GHSA-crjg-w57m-rqqf

    DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks

    ### Impact Users using the `ValidatingResolver` for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. ### Patches Users should upgrade to dnsjava v3.6.0 ### Workarounds Although not recommended, only using a non-validat…

    dnsjava:dnsjava org.jitsi:dnssecjava Maven
  • Medium 6.5
    GHSA-mmwx-rj87-vfgr

    DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources

    ### Impact Users using the `ValidatingResolver` for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. ### Patches Users should upgrade to dnsjava v3.6.0 ### Workarounds Although not recommended, only using a non-validat…

    dnsjava:dnsjava org.jitsi:dnssecjava Maven
  • High 8.9
    CVE-2024-25638

    DNSJava DNSSEC Bypass

    dnsjava is an implementation of DNS in Java. Records in DNS replies are not checked for their relevance to the query, allowing an attacker to respond with RRs from different zones. This vulnerability is fixed in 3.6.0.

    dnsjava dnsjava dnsjava:dnsjava dnsjava Debian Ubuntu Maven