Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: hickory-dns 0.26.1 Clear all filters
TI-2026-86750 CVE-2026-123608 · GHSA-jcq8-9rwq-2c6j

CPU exhaustion in Hickory DNS hickory-proto via BinEncoder name compression

Priority LOW 38

Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00409 Published 2026-11-08 Fixed in 0.26.1 CWE-407
TI-2026-86749 CVE-2026-123607 · GHSA-jvpj-j4xv-2492

Hickory DNS NSEC3 validation loop enables denial of service

Priority LOW 38

Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancest…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00343 Published 2026-11-08 Fixed in 0.26.1 CWE-835