modules:
  - module: github.com/miekg/dns
    versions:
      - fixed: 1.0.10
    vulnerable_at: 1.0.9
    packages:
      - package: github.com/miekg/dns
        symbols:
          - setTA
        derived_symbols:
          - NewRR
          - ParseZone
          - ReadRR
description: |
    Due to a nil pointer dereference, parsing a malformed zone file
    containing TA records may cause a panic. If parsing user supplied
    input, this may be used as a denial of service vector.
published: 2021-04-14T20:04:52Z
cves:
  - CVE-2018-17419
ghsas:
  - GHSA-9jcx-pr2f-qvq5
credit: '@tr3ee'
references:
  - fix: https://github.com/miekg/dns/commit/501e858f679edecd4a38a86317ce50271014a80d
  - report: https://github.com/miekg/dns/issues/742