![A lock](https://wp-cdn.pi-hole.net/wp-content/uploads/2024/02/cyberpunk-generator-e1707854617633.webp)
Fixing two new DNSSEC vulnerabilities
Today, we have been informed about two DNSSEC vulnerabilities in dnsmasq, which Pi-hole FTL is forked from. Both vulnerabilities, via specially crafted DNSSEC answers, can lead DNSSEC validators down a very CPU intensive and time costly validation/NSEC3 hash calculation path. This results in degraded performance and denial of service in trivially orchestrated attacks. In…
Read more