Skip to content
OpenAdvisories

Package · crates.io

hickory-resolver

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-123585

    Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records

    The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME re…

    hickory-dns hickory-dns rust-hickory-resolver rust-hickory-resolver Debian Ubuntu crates.io
  • Medium —
    GHSA-6f2x-v7q7-m7m5

    hickory-resolver follows irrelevant CNAME records

    When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are any CNAME records in the authority section or additional section of the response, queries will be sent for those …

    hickory-resolver crates.io