]> git.ipfire.org Git - thirdparty/unbound.git/commit
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
authorW.C.A. Wijngaards <wouter@nlnetlabs.nl>
Tue, 13 Feb 2024 12:02:08 +0000 (13:02 +0100)
committerW.C.A. Wijngaards <wouter@nlnetlabs.nl>
Tue, 13 Feb 2024 12:02:08 +0000 (13:02 +0100)
commit882903f2fa800c4cb6f5e225b728e2887bb7b9ae
tree53b1b779d3222fe198d5249a20235e326102c569
parent3352b1090ea1098883f6bf64236fa877e18e458b
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
  exhaust CPU resources and stall DNS resolvers.
14 files changed:
services/authzone.c
testcode/unitverify.c
testdata/val_any.rpl
testdata/val_any_dname.rpl
testdata/val_any_negcache.rpl
util/fptr_wlist.c
validator/val_nsec.c
validator/val_nsec3.c
validator/val_sigcrypt.c
validator/val_sigcrypt.h
validator/val_utils.c
validator/val_utils.h
validator/validator.c
validator/validator.h