CVE-2018-20994: Trust-DNS-Proto Project Trust-DNS-Proto

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled.

Affected products

• Trust-DNS-Proto Project Trust-DNS-Proto: before 0.4.3 (fixed in 0.4.3); version 0.5.0 only

Published 2019-08-26. Last modified 2026-06-17.