Summary

As GHSA-3cr5-j632-f35r, same null termination is occuring

Details

dns_get_record() and other DNS functions don't have any null contain check, leads potential SSRF or unexpected behavior.

PoC

<?php

var_dump(dns_get_record("php.net\0aa"));

Result: DNS records of php.net
Expect: Fails to call

Security impact

(Even though it's too low but,) Probability of SSRF