hickory-dns
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 40
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, hickory-dns recorded 40 security vulnerabilities in the last 90 days across 2 products, including 25 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, hickory-dns had the most security vulnerabilities in the hickory-dns ecosystem, with 39 vulnerabilities—approximately 97.5% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-123608Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name CompressionCVE-2026-123607Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of ServiceCVE-2026-123606Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral AmplificationCVE-2026-123605Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's NameCVE-2026-123604Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-123608Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression | Exploitation statusNot confirmed | FixYes |
| Affected producthickory-dns |
| Published11/08/2026 |
| SeverityHigh |
CVE-2026-123607Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123606Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123605Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123604Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123603Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123602Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123601Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123600Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123599Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123598Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123597Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123596Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123595Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3 | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123594Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123593Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123592Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123591Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123590Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123589Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123588Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123587Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123586Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123585Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123584Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123583Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123582Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123581Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123580Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123579Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123578Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0 | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123577Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123576Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123575Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123574Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123573hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123572Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123571Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123570Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts | Exploitation statusNot confirmed | FixYes | Affected producthickory-dns | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-93657hickory-resolver before 0.26.2 DNSSEC Validation Bypass | Exploitation statusNot exploited | FixYes | Affected producthickory-resolver | Published09/18/2026 | SeverityHigh |
|---|
CVE-2025-25188DNSSEC validation may accept broken authentication chains | Exploitation statusActively exploited | FixNo | Affected producthickory-dns | Published02/10/2025 | SeverityMedium |
|---|
41 Results | Page 1 of 1