17 matches found
UBUNTU-CVE-2026-123578
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
Linux Distros Unpatched Vulnerability : CVE-2026-123578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query whe...
CVE-2026-123578
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
DEBIAN-CVE-2026-123578
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
CVE-2026-123578 Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
CVE-2026-123578 Hickory DNS 0.26.0 before 0.26.2 Response Validation Bypass via QDCOUNT=0
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
EUVD-2026-119337
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
PT-2026-139859
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
CVE-2026-123578: hickory-dns: Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP…
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section QDCOUNT=0, and also skip the case-randomization check. Remote attackers able to inject spoof...
ALPINE-CVE-2026-33602
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service...
CVE-2026-33602 Off-by-one access when processing crafted UDP responses
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service...
CVE-2026-33602: Heap-based Buffer Overflow
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service...
CVE-2003-1354: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...
CVE-2003-0903
Buffer overflow in a component of Microsoft Data Access Components MDAC 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request...
CVE-2003-0903: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in a component of Microsoft Data Access Components MDAC 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request...
