Lucene search
+L

71 matches found

RustSec
RustSec
added 2025/03/23 12:00 p.m.10 views

The `trust-dns` project has been rebranded to `hickory-dns`

The trust-dns-proto crate is now available as hickory-proto...

7.2AI score
SaveExploits0Affected Software1
OSV
OSV
added 2025/03/23 12:00 p.m.9 views

RUSTSEC-2025-0017 The `trust-dns` project has been rebranded to `hickory-dns`

The trust-dns-proto crate is now available as hickory-proto...

7.2AI score
SaveExploits0References4
OSV
OSV
added 2025/02/21 12:00 p.m.8 views

RUSTSEC-2025-0013 resolve is unmaintained

resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...

7.2AI score
SaveExploits0References3
RustSec
RustSec
added 2025/02/21 12:00 p.m.12 views

resolve is unmaintained

resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/02/15 12:00 a.m.23 views

The vulnerability of the verify_dnskey_rrset() function in the Hickory DNS client (formerly Trust-DNS) allows a attacker to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the verifydnskeyrrset function in the Hickory DNS client formerly Trust-DNS is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected informati...

6.8CVSS5.5AI score0.00278EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/12 6:40 p.m.10 views

CVE-2025-25188

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS6AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/10 6:15 p.m.13 views

CVE-2025-25188

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS0.00278EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/10 6:15 p.m.2 views

DEBIAN-CVE-2025-25188

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS5.4AI score0.00278EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/10 6:15 p.m.13 views

UBUNTU-CVE-2025-25188

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS5.8AI score0.00278EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/10 5:35 p.m.5 views

CVE-2025-25188 DNSSEC validation may accept broken authentication chains

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS6AI score0.00278EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/10 5:35 p.m.2489 views

CVE-2025-25188

CVE-2025-25188 affects Hickory DNS (Rust-based DNS client/server/resolver). The vulnerability lies in DNSSEC validation: the routines may treat entire RRsets of DNSKEY records as trusted after establishing trust with a single DNSKEY, causing all keys in a zone to be trusted to authenticate other ...

7.1CVSS5.9AI score0.00278EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/10 5:35 p.m.12 views

CVE-2025-25188 DNSSEC validation may accept broken authentication chains

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS6.3AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/02/10 5:35 p.m.20 views

CVE-2025-25188 DNSSEC validation may accept broken authentication chains

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS0.00278EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/02/10 5:35 p.m.14 views

CVE-2025-25188

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validati...

7.1CVSS5.4AI score0.00278EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/02/10 12:00 a.m.10 views

Hickory DNS 数据伪造问题漏洞

Hickory DNS is a Rust-based DNS client, server, and resolver from the Hickory DNS open source. A data forgery issue vulnerability exists in Hickory DNS version 0.8.0 and earlier, which stems from the DNSSEC validation mechanism incorrectly treating DNSKEY records across RRsets as trusted, and a...

7.1CVSS6.5AI score0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2019/08/22 2:15 p.m.17 views

CVE-2019-5633

An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for iOS,...

6.5CVSS5.4AI score0.00351EPSS
SaveExploits0References2
OSV
OSV
added 2019/08/22 2:15 p.m.15 views

CVE-2019-5632

An insecure storage of sensitive information vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for...

5.5CVSS6.4AI score0.00351EPSS
SaveExploits0References2
OSV
OSV
added 2019/08/22 2:15 p.m.8 views

CVE-2019-5633

An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for iOS,...

5.5CVSS6.4AI score0.00351EPSS
SaveExploits0References2
OSV
OSV
added 2019/08/22 2:15 p.m.12 views

CVE-2019-5634

An inclusion of sensitive information in log files vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. Communications to the internet API services and direct connections to the lock via Bluetooth Low Energy BLE from the mobile application are logged in...

4.3CVSS6.4AI score0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2019/08/22 2:15 p.m.22 views

CVE-2019-5635

A cleartext transmission of sensitive information vulnerability is present in Hickory Smart Ethernet Bridge from Belwith Products, LLC. Captured data reveals that the Hickory Smart Ethernet Bridge device communicates over the network to an MQTT broker without using encryption. This exposed the...

7.5CVSS6.6AI score0.00372EPSS
SaveExploits0References2
Rows per page
Query Builder