← All credits

Qifan Zhang (Palo Alto Networks)

38 vulnerability records and advisories credit this contributor.

Long list of incoming EDNS options degrades performance

Unbounded name compression in certain cases causes degradation of service

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

BOGUS configured primary hostname accepted for XFR in auth/rpz zones

'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL

Possible heap use-after-free in an error path when a DoT forwarded query is jostled out

A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

Cross-zone wildcard cache poisoning via RRSIG.labels manipulation

Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush

Packet of death for DNSCrypt over TCP