132 matches found
CVE-2026-93657: Improper Verification of Cryptographic Signature
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookupip APIs, allowing invalid records to be returned as successful results. Attackers controlling the answering zone or positioned on the network path can have forged D...
PT-2026-95426
Name of the Vulnerable Software and Affected Versions hickory-resolver versions prior to 0.26.2 Description The software fails to propagate bogus DNSSEC proof states through the Resolver::lookup and Resolver::lookup ip APIs, which allows invalid records to be returned as successful results. This...
[SECURITY] Fedora 43 Update: rust-hickory-net-0.26.2-1.fc43
Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
[SECURITY] Fedora 43 Update: rust-hickory-resolver-0.26.2-1.fc43
Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...
[SECURITY] Fedora 43 Update: rust-hickory-proto-0.26.2-1.fc43
Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
[SECURITY] Fedora 44 Update: rust-hickory-proto-0.26.2-1.fc44
Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
[SECURITY] Fedora 44 Update: rust-hickory-resolver-0.26.2-1.fc44
Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...
[SECURITY] Fedora 44 Update: rust-hickory-net-0.26.2-1.fc44
Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
[SECURITY] Fedora 45 Update: rust-hickory-proto-0.26.2-1.fc45
Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
[SECURITY] Fedora 45 Update: rust-hickory-resolver-0.26.2-1.fc45
Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...
[SECURITY] Fedora 45 Update: rust-hickory-net-0.26.2-1.fc45
Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
Fedora 44 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-3c1acd5a65)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-3c1acd5a65 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...
Fedora 45 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-37e598af67)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-37e598af67 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...
Fedora 43 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-e82315c1dc)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-e82315c1dc advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...
Fedora 46 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-08a5c52d65)
The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-08a5c52d65 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...
acme-validation-propagation (>=0.1.5, <=0.1.8), agnostic (>=0.2.1, <=0.2.6) +37 more potentially affected by unknown CVE via hickory-proto (>=0.24.4, <=0.25.0-alpha.5)
hickory-proto CARGO version =0.24.4, =0.1.5, =0.2.1, =0.24.0, =0.9.3, =0.1.0, =0.5.0, =0.1.0, =0.0.1, =0.2.6, =0.2.8 - getip 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q2QQ-HMJ6-3WPP...
GHSA-Q2QQ-HMJ6-3WPP hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
During message encoding, hickory-proto's BinEncoder stores pointers to labels that are candidates for name compression in a Vec. The name compression logic then searches for matches with a linear scan. A malicious message with many records can both introduce many candidate labels, and invoke this...
hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
During message encoding, hickory-proto's BinEncoder stores pointers to labels that are candidates for name compression in a Vec. The name compression logic then searches for matches with a linear scan. A malicious message with many records can both introduce many candidate labels, and invoke this...
async-std-resolver (>=0.25.0-alpha.1, <=0.25.0-alpha.5), ezk-sip-ua (>=0.5.0, <=0.7.1) +5 more potentially affected by unknown CVE via hickory-proto (>=0.25.0-alpha.1, <=0.25.0-alpha.5)
hickory-proto CARGO version =0.25.0-alpha.1, =0.25.0-alpha.1, =0.5.0, =0.25.0-alpha.1, =0.25.0-alpha.5 - hickory-resolver 0.25.0-alpha.1 - hickory-server 0.25.0-alpha.1 - shadowsocks 1.22.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3V94-MW7P-V465...