Skip to content
OpenAdvisories

Package · Debian

rust-hickory-resolver

10 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.7

    Hickory DNS 0.25.0 through 0.26.0-alpha.1 DNSSEC Bogus Answer Cache Poisoning

    The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net 0.26.0-beta.1 before 0.26.2 caches DNSSEC-bogus answers using the untrusted, attacker-supplied record TTL (ca…

  • Low 3.7

    Hickory DNS 0.25.0 through 0.25.2 Missing Bailiwick Filtering on Negative Responses

    The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-resolver 0.26.0 before 0.26.2 does not apply out-of-bailiwick filtering to negative responses. Attackers able to supply crafted negative responses can include out-of-bail…