CVE-2026-123604 Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop

Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::trysend, which re-queues truncated TC responses without checking the answering transport or counting iterations. A malicious authoritative server returning TC=1 on every transport keeps th...

CVE-2026-123604 Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop

Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::trysend, which re-queues truncated TC responses without checking the answering transport or counting iterations. A malicious authoritative server returning TC=1 on every transport keeps th...

CVE-2026-123604

The hickory-resolver component in Hickory DNS versions 0.26.0-beta.1 before 0.26.2 is vulnerable to a Resource Exhaustion Denial of Service (DoS) . The root cause is an unbounded retry loop within NameServerPool::try_send, where the resolver re-queues truncated (TC ) responses without verifying t...

GHSA-6W6G-HM98-MHGM hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)

When the hickory-resolver name server pool implementation receives an upstream response with the TC truncated header bit set, it re-queues the request to the same nameserver to retry with UDP transport disabled. However, the retry arm never inspects the transport that just answered and carries no...

hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)

When the hickory-resolver name server pool implementation receives an upstream response with the TC truncated header bit set, it re-queues the request to the same nameserver to retry with UDP transport disabled. However, the retry arm never inspects the transport that just answered and carries no...