CVE-2026-123589

The hickory-dns (hickory-server) DNS server versions before 0.26.2 are vulnerable to a Denial of Service (DoS) attack. The root cause is a missing request read timeout in the DNS-over-QUIC (DoQ) server component, which allows the system to bypass all configured timeouts when reading a request mes...