| modules: | |
| - module: github.com/miekg/dns | |
| versions: | |
| - fixed: 1.0.10 | |
| vulnerable_at: 1.0.9 | |
| packages: | |
| - package: github.com/miekg/dns | |
| symbols: | |
| - setTA | |
| derived_symbols: | |
| - NewRR | |
| - ParseZone | |
| - ReadRR | |
| description: | | |
| Due to a nil pointer dereference, parsing a malformed zone file | |
| containing TA records may cause a panic. If parsing user supplied | |
| input, this may be used as a denial of service vector. | |
| published: 2021-04-14T20:04:52Z | |
| cves: | |
| - CVE-2018-17419 | |
| ghsas: | |
| - GHSA-9jcx-pr2f-qvq5 | |
| credit: '@tr3ee' | |
| references: | |
| - fix: https://github.com/miekg/dns/commit/501e858f679edecd4a38a86317ce50271014a80d | |
| - report: https://github.com/miekg/dns/issues/742 |