Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

hickory-dns — Vulnerabilities & Security Advisories 40

All 40 CVE vulnerabilities found in hickory-dns, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the hickory-dns DNS server software developed by the Hickory project team. The collection encompasses a comprehensive set of reported issues ranging from denial of service conditions and memory safety flaws to protocol parsing errors and configuration vulnerabilities identified over the past five years. Users visiting this resource can track official vendor advisories for hickory-dns to stay informed about the latest patches, analyze the specific characteristics of DNS-related weakness classes to understand their impact on network infrastructure, or review the complete historical vulnerability record of this product to assess long-term security posture. The data presented here is derived from public security bulletins, advisory databases, and community reports, offering a centralized view of the security landscape surrounding this open-source resolver and authoritative server implementation. By consolidating these findings, the page serves as a practical reference for system administrators, security researchers, and developers who need to evaluate risk, prioritize remediation efforts, or investigate the evolution of security issues within the hickory-dns codebase without navigating multiple disparate sources.

Vendor: hickory-dns

CVE ID Title CVSS Severity Published
CVE-2026-123608 Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression CWE-407 7.5 High 2026-11-08
CVE-2026-123606 Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification CWE-400 7.5 High 2026-11-08
CVE-2026-123607 Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service CWE-835 7.5 High 2026-11-08
CVE-2026-123605 Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name CWE-347 8.8 High 2026-11-08
CVE-2026-123603 Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass CWE-284 6.5 Medium 2026-11-08
CVE-2026-123604 Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop CWE-835 7.5 High 2026-11-08
CVE-2026-123602 Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching CWE-672 5.9 Medium 2026-11-08
CVE-2026-123601 Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery CWE-480 6.5 Medium 2026-11-08
CVE-2026-123599 Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records CWE-345 3.7 Low 2026-11-08
CVE-2026-123600 Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass CWE-358 4.8 Medium 2026-11-08
CVE-2026-123598 Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning CWE-613 3.7 Low 2026-11-08
CVE-2026-123597 Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors CWE-613 3.7 Low 2026-11-08
CVE-2026-123596 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC CWE-345 8.8 High 2026-11-08
CVE-2026-123595 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3 CWE-345 8.8 High 2026-11-08
CVE-2026-123594 Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals CWE-345 4.8 Medium 2026-11-08
CVE-2026-123593 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors CWE-1023 4.8 Medium 2026-11-08
CVE-2026-123592 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision CWE-1025 5.9 Medium 2026-11-08
CVE-2026-123591 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks CWE-345 5.9 Medium 2026-11-08
CVE-2026-123590 Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation CWE-347 4.8 Medium 2026-11-08
CVE-2026-123589 Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout 5.3 Medium 2026-11-08
CVE-2026-123588 Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool CWE-754 7.5 High 2026-11-08
CVE-2026-123587 Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC CWE-290 6.8 Medium 2026-11-08
CVE-2026-123586 Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals CWE-400 7.5 High 2026-11-08
CVE-2026-123585 Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records CWE-400 5.3 Medium 2026-11-08
CVE-2026-123584 Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses CWE-696 5.9 Medium 2026-11-08
CVE-2026-123583 Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses CWE-349 3.7 Low 2026-11-08
CVE-2026-123582 Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record CWE-345 3.7 Low 2026-11-08
CVE-2026-123580 Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 CWE-290 7.5 High 2026-11-08
CVE-2026-123581 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset CWE-345 5.3 Medium 2026-11-08
CVE-2026-123579 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion CWE-358 3.7 Low 2026-11-08

All 40 known CVE vulnerabilities affecting hickory-dns with full Chinese analysis, references, and POCs where available.