Qifan Zhang (Palo Alto Networks)

Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.

Bypass of a configured island trust anchor underneath an insecure parent from an atacker-controlled NSEC record.

Possible ZONEMD verification bypass window

Possible degradation of service from continuous queries on the same TCP/DoT connection

Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass

Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC

Crash during DNSSEC validation of malicious content

Possible arbitrary code execution during DNSSEC validation

Jostle logic bypass degrades resolution performance