Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

hickory-dns — Vulnerabilities & Security Advisories 41

Browse all 41 CVE security advisories affecting hickory-dns. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates known security weaknesses specific to the hickory-dns software product, categorized under the DNS resolver and authoritative server vendor tag. The collection encompasses a comprehensive history of reported vulnerabilities, including buffer overflows, denial-of-service conditions, and configuration flaws, spanning from the project's initial public release through the most recent security advisories. Users can utilize this resource to track the vendor's official security responses, analyze the prevalence and impact of specific weakness classes within DNS infrastructure, and review the complete vulnerability timeline for the hickory-dns product suite. The data presented here is derived from public security bulletins and community reports, offering a neutral view of the project's security posture without promotional commentary or marketing language. By examining these entries, security professionals and system administrators can make informed decisions regarding patch management, risk assessment, and the deployment of DNS services in their environments. The page serves as a centralized reference point for understanding how identified issues have been addressed over time, facilitating better long-term security planning for organizations relying on this open-source DNS implementation.

Top products by hickory-dns: hickory-dns hickory-resolver
CVE ID Title CVSS Severity Published
CVE-2026-123608 Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression — hickory-dns CWE-407 7.5 High 2026-11-08
CVE-2026-123606 Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification — hickory-dns CWE-400 7.5 High 2026-11-08
CVE-2026-123607 Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service — hickory-dns CWE-835 7.5 High 2026-11-08
CVE-2026-123605 Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name — hickory-dns CWE-347 8.8 High 2026-11-08
CVE-2026-123604 Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop — hickory-dns CWE-835 7.5 High 2026-11-08
CVE-2026-123603 Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass — hickory-dns CWE-284 6.5 Medium 2026-11-08
CVE-2026-123602 Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching — hickory-dns CWE-672 5.9 Medium 2026-11-08
CVE-2026-123601 Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery — hickory-dns CWE-480 6.5 Medium 2026-11-08
CVE-2026-123599 Hickory DNS before 0.26.0-beta.1 DNSSEC Validation Bypass via Non-IN Class Records — hickory-dns CWE-345 3.7 Low 2026-11-08
CVE-2026-123600 Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 NSEC3 Apex NODATA Validation Bypass — hickory-dns CWE-358 4.8 Medium 2026-11-08
CVE-2026-123598 Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning — hickory-dns CWE-613 3.7 Low 2026-11-08
CVE-2026-123597 Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors — hickory-dns CWE-613 3.7 Low 2026-11-08
CVE-2026-123596 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC — hickory-dns CWE-345 8.8 High 2026-11-08
CVE-2026-123595 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3 — hickory-dns CWE-345 8.8 High 2026-11-08
CVE-2026-123594 Hickory DNS through 0.26.0-alpha.1 DNSSEC NSEC Validation Bypass for Empty Non-Terminals — hickory-dns CWE-345 4.8 Medium 2026-11-08
CVE-2026-123593 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors — hickory-dns CWE-1023 4.8 Medium 2026-11-08
CVE-2026-123592 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision — hickory-dns CWE-1025 5.9 Medium 2026-11-08
CVE-2026-123590 Hickory DNS 0.26.0-beta.1 before 0.26.2 Improper NSEC/NSEC3 Signature Validation — hickory-dns CWE-347 4.8 Medium 2026-11-08
CVE-2026-123591 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks — hickory-dns CWE-345 5.9 Medium 2026-11-08
CVE-2026-123589 Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout — hickory-dns 5.3 Medium 2026-11-08
CVE-2026-123588 Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool — hickory-dns CWE-754 7.5 High 2026-11-08
CVE-2026-123587 Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC — hickory-dns CWE-290 6.8 Medium 2026-11-08
CVE-2026-123586 Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals — hickory-dns CWE-400 7.5 High 2026-11-08
CVE-2026-123585 Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records — hickory-dns CWE-400 5.3 Medium 2026-11-08
CVE-2026-123584 Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses — hickory-dns CWE-696 5.9 Medium 2026-11-08
CVE-2026-123583 Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses — hickory-dns CWE-349 3.7 Low 2026-11-08
CVE-2026-123582 Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record — hickory-dns CWE-345 3.7 Low 2026-11-08
CVE-2026-123581 Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Unrelated RRset — hickory-dns CWE-345 5.3 Medium 2026-11-08
CVE-2026-123580 Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3 — hickory-dns CWE-290 7.5 High 2026-11-08
CVE-2026-123579 Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Wildcard Expansion — hickory-dns CWE-358 3.7 Low 2026-11-08

This page lists every published CVE security advisory associated with hickory-dns. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.