146 matches found
CVE-2025-40778
CVE-2025-40778 Proof of Concept Educational demonstration of DNS Cache Poisoning vulnerability via Additional Records injection. ⚠️ Disclaimer FOR EDUCATIONAL PURPOSES ONLY This tool is provided for educational and authorized security testing purposes only. Unauthorized use of this tool against...
CVE-2026-123586
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
Linux Distros Unpatched Vulnerability : CVE-2026-123588
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The recursive resolver in Hickory DNS all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2 caches an empty connection pool when...
Linux Distros Unpatched Vulnerability : CVE-2026-123586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server...
CVE-2026-123582
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
CVE-2026-123588
The recursive resolver in Hickory DNS all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2 caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP addresses fail. An attacker able to spoof DNS...
CVE-2026-123583
The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-resolver 0.26.0 before 0.26.2 does not apply out-of-bailiwick filtering to negative responses. Attackers able to supply crafted negative responses can include out-of-bailiwick records to facilitate cache...
DEBIAN-CVE-2026-123586
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
CVE-2026-123586
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
CVE-2026-123588
The recursive resolver in Hickory DNS all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2 caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP addresses fail. An attacker able to spoof DNS...
EUVD-2026-119347
The recursive resolver in Hickory DNS all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2 caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP addresses fail. An attacker able to spoof DNS...
CVE-2026-123586 Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
CVE-2026-123586
The Hickory DNS recursive resolver versions 0.25.0-alpha.3 through 0.25.2 are vulnerable to a query amplification attack. The root cause is the improper handling of cyclic sibling name server referrals that lack glue records . An attacker controlling two zones can create a loop where name servers...
CVE-2026-123586 Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
EUVD-2026-119345
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
CVE-2026-123586 Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
PT-2026-139869
Name of the Vulnerable Software and Affected Versions hickory-recursor affected versions not specified hickory-resolver versions 0.26.0 through 0.26.1 Description The recursive resolver caches an empty connection pool when following a referral that lacks glue records DNS records that provide the ...
CVE-2026-123586: hickory-dns: Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which…
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each other without glue records can make the...
CLEANSTART-2025-PZ66777 To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database
Security vulnerability affects the bind package. To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database...
bind security update
9.18.33-15.0.1.el102.13 - Hard require needed openssl-libs Orabug: 38742109 - Fix warning when changing device file permissions Orabug: 36518580 32:9.18.33-15.13 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. 32:9.18.33-15.12 - Prevent assertion failure in dns6...