https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T02:57:45.738802+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35857 CVE-2020-35857 2026-10-23T02:57:45.740864+00:00

An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption.

 https://cve.radiocsirt.org/vuln/ghsa-4cww-f7w5-x525 GHSA-4cww-f7w5-x525 — Stack consumption in trust-dns-server 2026-10-23T02:57:45.740932+00:00

Affected: crates.io: trust-dns-server

There's a stack overflow leading to a crash and potential DOS when processing additional records for return of MX or SRV record types from the server. This is only possible when a zone is configured with a null target for MX or SRV records. Prior to 0.16.0 the additional record processing was not supported by trust-dns-server. There Are no known issues with upgrading from 0.16 or 0.17 to 0.18.1. The remidy should be to upgrade to 0.18.1. If unable to do so, MX, SRV or other record types with a target to the null type, should be avoided.