Skip to content
OpenAdvisories

Package · Maven

dnsjava:dnsjava

3 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 6.5
    GHSA-crjg-w57m-rqqf

    DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks

    ### Impact Users using the `ValidatingResolver` for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. ### Patches Users should upgrade to dnsjava v3.6.0 ### Workarounds Although not recommended, only using a non-validat…

    dnsjava:dnsjava org.jitsi:dnssecjava Maven
  • Medium 6.5
    GHSA-mmwx-rj87-vfgr

    DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources

    ### Impact Users using the `ValidatingResolver` for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones. ### Patches Users should upgrade to dnsjava v3.6.0 ### Workarounds Although not recommended, only using a non-validat…

    dnsjava:dnsjava org.jitsi:dnssecjava Maven