Lucene search
+L

132 matches found

OSV
OSV
•added 2026/04/26 2:38 a.m.•19 views

CVE-2026-42254

Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...

4CVSS5.9AI score
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/04/26 2:38 a.m.•25 views

CVE-2026-42254

Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...

4CVSS5.9AI score0.00256EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/04/26 2:38 a.m.•50 views

CVE-2026-42254

Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...

4CVSS0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/26 2:38 a.m.•46 views

CVE-2026-42254

The CVE affects Hickory DNS hickory-recursor versions 0.1 through 0.25.2. The root cause is cross-zone poisoning caused by cached data not being directly associated with the query that triggered the response, enabling manipulation of cached responses. Impact is limited to information integrity in...

4CVSS5.9AI score0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/26 2:38 a.m.•12 views

CVE-2026-42254

Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...

4CVSS5.9AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/26 12:00 a.m.•22 views

Hickory DNS 安全漏洞

Hickory DNS is an open-source DNS client, server, and resolver built in Rust. Versions 0.1 to 0.25.2 of Hickory DNS contain security vulnerabilities. These vulnerabilities stem from cache data that is not directly associated with queries that trigger responses, allowing cross-region poisoning...

4CVSS5.8AI score0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/26 12:00 a.m.•5 views

CVE-2026-42254: Use of Incorrectly-Resolved Name or Reference

Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response...

4CVSS5.8AI score0.00256EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/26 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-42254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a respons...

4CVSS5.9AI score0.00256EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/26 12:00 a.m.•27 views

PT-2026-35193

Name of the Vulnerable Software and Affected Versions Hickory DNS hickory-recursor versions 0.1 through 0.25.2 Description Cross-zone poisoning is possible because cached data is not directly associated with the query that triggered the response. Recommendations At the moment, there is no...

8.7CVSS5.8AI score0.00256EPSS
SaveExploits0References15
OSV
OSV
•added 2026/04/22 12:00 p.m.•19 views

RUSTSEC-2026-0106 Record cache accepts AUTHORITY section NS from sibling zone via parent-pool zone-context elevation

The Hickory DNS project's experimental hickory-recursor crate's record cache DnsLru stores records from DNS responses keyed by each record's own name, type, not by the query that triggered the response. cacheresponse in crates/recursor/src/lib.rs chains ANSWER, AUTHORITY, and ADDITIONAL sections...

5.7AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2026/04/22 12:00 p.m.•11 views

hickory-server (>=0.24.0, <=0.25.0-alpha.1) potentially affected by unknown CVE via hickory-recursor (>=0.24.4, <=0.25.0-alpha.1)

hickory-recursor CARGO version =0.24.4, =0.24.0, =0.25.0-alpha.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0106...

5.4AI score
SaveExploits0
RustSec
RustSec
•added 2026/04/22 12:00 p.m.•35 views

Record cache accepts AUTHORITY section NS from sibling zone via parent-pool zone-context elevation

The Hickory DNS project's experimental hickory-recursor crate's record cache DnsLru stores records from DNS responses keyed by each record's own name, type, not by the query that triggered the response. cacheresponse in crates/recursor/src/lib.rs chains ANSWER, AUTHORITY, and ADDITIONAL sections...

5.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•4 views

PT-2026-36633

The Hickory DNS project's experimental hickory-recursor crate's record cache DnsLru stores records from DNS responses keyed by each record's own name, type, not by the query that triggered the response. cache response in crates/recursor/src/lib.rs chains ANSWER, AUTHORITY, and ADDITIONAL sections...

5.7AI score
SaveExploits0References4
CVD
CVD
•added 2026/01/01 12:00 a.m.•11 views

Hickory DNS: undisclosed vulnerability (ZAI-2026-CFUY6G)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•22 views

Hickory DNS: undisclosed vulnerability (ZAI-2026-UGLPYB)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
CVD
CVD
•added 2026/01/01 12:00 a.m.•14 views

Hickory DNS: undisclosed vulnerability (ZAI-2026-Q6IVNX)

Not disclosed. Details are not yet publicly disclosed...

5.3AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2019-15210

Malware in sbrugna...

7.5CVSS6.7AI score0.00372EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-15208

Malware in sbrugna...

6.5CVSS6.1AI score0.00351EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-15209

Malware in sbrugna...

6.5CVSS5.7AI score0.00357EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2025-4078

Malicious code in bioql PyPI...

7.1CVSS6.3AI score0.00284EPSS
SaveExploits0References3
Rows per page
Query Builder