https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:44:12.407823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-20994 CVE-2018-20994 2026-10-02T09:44:12.409386+00:00

An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled.

 https://cve.radiocsirt.org/vuln/ghsa-369h-pjr2-6wrh GHSA-369h-pjr2-6wrh — Uncontrolled recursion in trust-dns-proto 2026-10-02T09:44:12.409431+00:00

Affected: crates.io: trust-dns-proto

There's a stack overflow leading to a crash when Trust-DNS's parses a malicious DNS packet. Affected versions of this crate did not properly handle parsing of DNS message compression (RFC1035 section 4.1.4). The parser could be tricked into infinite loop when a compression offset pointed back to the same domain name to be parsed. This allows an attacker to craft a malicious DNS packet which when consumed with Trust-DNS could cause stack overflow and crash the affected software.