Description

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of security controls such as allowlists and egress checks, as well as DNS cache poisoning, where a recursive resolver caches an attacker-chosen name instead of the intended one. This also results in inaccurate DNS logs.

Mitigation

Aliases