Hickory-dns vulnerabilities
41 CVEs and advisories name Hickory-dns as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-123608Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression
- CVE-2026-123607Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service
- CVE-2026-123606Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification
- CVE-2026-123605Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name
- CVE-2026-123604Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop
- CVE-2026-123603Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass
- CVE-2026-123602Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching
- CVE-2026-123601Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery
- CVE-2026-123600Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass
- CVE-2026-123599Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records
- CVE-2026-123598Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning
- CVE-2026-123597Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors
- CVE-2026-123596Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC
- CVE-2026-123595Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3
- CVE-2026-123594Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals
- CVE-2026-123593Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors
- CVE-2026-123592Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision
- CVE-2026-123591Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks
- CVE-2026-123590Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation
- CVE-2026-123589Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout
- CVE-2026-123588Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool
- CVE-2026-123587Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC
- CVE-2026-123586Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals
- CVE-2026-123585Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records
- CVE-2026-123584Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses
- CVE-2026-123583Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses
- CVE-2026-123582Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record
- CVE-2026-123581Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset
- CVE-2026-123580Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3
- CVE-2026-123579Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion