686 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-123582
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC...
CVE-2026-123582
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
CVE-2026-123587
The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name to an SOA record in the response, accepting that SOA even if it fails validation. Attackers who can supply DNS responses can combine a genuine NSEC...
DEBIAN-CVE-2026-123582
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
CVE-2026-123582
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
CVE-2026-123607 Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Upstream attackers can return NoData or NXDomain responses...
EUVD-2026-119346
The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name to an SOA record in the response, accepting that SOA even if it fails validation. Attackers who can supply DNS responses can combine a genuine NSEC...
CVE-2026-123582 Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
CVE-2026-123582
The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) versions 0.25.0 before 0.26.2 are vulnerable to a DNSSEC validation bypass . The root cause is that the software fails to verify if the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA...
CVE-2026-123582 Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
CVE-2026-123582 Hickory DNS 0.25.0 before 0.26.2 DNSSEC Validation Bypass via SOA Record
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
EUVD-2026-119341
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
PT-2026-139863
Name of the Vulnerable Software and Affected Versions Hickory DNS hickory-server versions 0.25.0 through 0.26.1 Description The validating recursive resolver and validating forwarder fail to verify if the SOA record passed DNSSEC validation when constructing NXDOMAIN or NODATA responses. This...
CVE-2026-123582: hickory-dns: The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) 0.25.0 before 0.26.2 do not…
The validating recursive resolver and validating forwarder in Hickory DNS hickory-server 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. An attacker able to supply forged DNS responses can have a forged SOA record...
VulnCheck KEV: CVE-2013-2165
ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBo...
Vulnerabilities in Oracle Fusion Middleware
Oracle has identified several vulnerabilities in various products, including the Oracle SOA Suite, Oracle WebLogic Server, Oracle Data Integrator, Oracle Identity Manager, Oracle Access Manager, Oracle WebCenter Content, Oracle Fusion Middleware including Helidon, and Oracle HTTP Server. These...
USN-8951-1 c-ares vulnerabilities
It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2020-22217 It was discovered that c-ares incorrectl...
EUVD-2026-106768
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle SOA Suite...
EUVD-2026-106506
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Adapters. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle SOA Suite. While the...
EUVD-2026-106505
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Adapters. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle SOA...