Skip to content
OpenAdvisories

Package · Debian

rust-hickory-recursor

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-123588

    Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool

    The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP addresses fa…

    hickory-dns hickory-dns rust-hickory-resolver rust-hickory-resolver Debian Ubuntu
  • High 7.5
    CVE-2026-123586

    Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals

    Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. Attackers controlling two zones whose name servers reference each o…

    hickory-dns hickory-dns rust-hickory-resolver rust-hickory-resolver Debian Ubuntu