DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks
Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones.
Advisories for Maven/Org.jitsi/Dnssecjava package
2024
DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources
Users using the ValidatingResolver for DNSSEC validation can run into CPU exhaustion with specially crafted DNSSEC-signed zones.