Hickory-dns vulnerabilities

Products

• Hickory-dns 40

Newest

• hickory-dns Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification CVE-2026-123606 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name CVE-2026-123605 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass CVE-2026-123603 Fix available 6.9 MediumNovember 8, 2026
• hickory-dns Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching CVE-2026-123602 Fix available 8.2 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery CVE-2026-123601 Fix available 8.3 HighNovember 8, 2026
• hickory-dns Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass CVE-2026-123600 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records CVE-2026-123599 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning CVE-2026-123598 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors CVE-2026-123597 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC CVE-2026-123596 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3 CVE-2026-123595 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals CVE-2026-123594 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors CVE-2026-123593 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision CVE-2026-123592 Fix available 8.2 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks CVE-2026-123591 Fix available 8.2 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation CVE-2026-123590 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout CVE-2026-123589 Fix available 6.9 MediumNovember 8, 2026
• hickory-dns Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool CVE-2026-123588 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC CVE-2026-123587 Fix available 8.9 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals CVE-2026-123586 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses CVE-2026-123584 Fix available 8.2 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses CVE-2026-123583 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record CVE-2026-123582 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset CVE-2026-123581 Fix available 6.9 MediumNovember 8, 2026
• hickory-dns Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 CVE-2026-123580 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion CVE-2026-123579 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0 CVE-2026-123578 Fix available 6.3 MediumNovember 8, 2026
• hickory-dns Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service CVE-2026-123577 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests CVE-2026-123576 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies CVE-2026-123575 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser CVE-2026-123574 Fix available 8.7 HighNovember 8, 2026
• hickory-dns hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser CVE-2026-123573 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser CVE-2026-123572 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding CVE-2026-123571 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts CVE-2026-123570 Fix available 8.7 HighNovember 8, 2026
• hickory-dns Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records CVE-2026-123585 Fix available 6.9 MediumOctober 5, 2026
• hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop CVE-2026-123604 Fix available 8.7 HighOctober 5, 2026
• hickory-dns hickory-resolver hickory-resolver before 0.26.2 DNSSEC Validation Bypass CVE-2026-93657 Fix available 8.7 HighSeptember 18, 2026
• hickory-dns Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression CVE-2026-123608 Fix available 8.7 HighMay 1, 2026
• hickory-dns Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service CVE-2026-123607 Fix available 8.7 HighMay 1, 2026
• hickory-dns DNSSEC validation may accept broken authentication chains CVE-2025-25188 Fix available 5.7 MediumFebruary 10, 2025