W.C.A. Wijngaards 882903f2fa - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to ...

exhaust CPU resources and stall DNS resolvers.

2024-02-13 13:02:08 +01:00

..

autotrust.c

Downstream DNS Cookies a la RFC7873 and RFC9018

2022-09-28 10:28:19 +02:00

autotrust.h

- Expose if a query (or a subquery) was ratelimited (not src IP

2018-08-03 14:00:46 +00:00

val_anchor.c

- disable-edns-do, validator init prints warning when disable-edns-do is

2023-10-05 14:33:22 +02:00

val_anchor.h

- disable-edns-do, validator init prints warning when disable-edns-do is

2023-10-05 14:33:22 +02:00

val_kcache.c

Review for #759:

2023-07-19 15:20:44 +02:00

val_kcache.h

Review for #759:

2023-07-19 15:20:44 +02:00

val_kentry.c

Review for #759:

2023-07-19 15:20:44 +02:00

val_kentry.h

Review for #759:

2023-07-19 15:20:44 +02:00

val_neg.c

- Fix ssl.h include brackets, instead of quotes.

2023-03-16 15:40:43 +01:00

val_neg.h

DLV removal

2020-08-04 09:05:09 +02:00

val_nsec3.c

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00

val_nsec3.h

Add the basic EDE (RFC8914) cases (#604)

2022-05-06 12:48:53 +02:00

val_nsec.c

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00

val_nsec.h

Review for #759:

2023-07-19 15:20:44 +02:00

val_secalgo.c

- Reintroduce documentation and more EDE support for

2022-07-04 00:06:26 +02:00

val_secalgo.h

zonemd, digest code calls, secalgo openssl sha384 and sha512.

2020-10-09 11:19:31 +02:00

val_sigcrypt.c

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00

val_sigcrypt.h

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00

val_utils.c

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00

val_utils.h

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00

validator.c

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00

validator.h

- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to

2024-02-13 13:02:08 +01:00