Skip to content
OpenAdvisories

Package · Debian

rust-hickory-resolver

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-123603

    Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass

    hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hickory-recursor 0.25.0-alpha.3 through 0.26.0-alpha.1 fail to canonicalize IPv4-mapped IPv6 addresses when checking deny_answers, deny_server, or Access…

    hickory-dns hickory-dns rust-hickory-proto rust-hickory-proto Debian Ubuntu
  • Medium 5.9
    CVE-2026-123602

    Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching

    The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2 (recursor feature) is vulnerable to ghost domain names attacks because it reuses child-side apex NS RRsets cached from zone NS queries for iterati…

    hickory-dns hickory-dns rust-hickory-resolver rust-hickory-resolver Debian Ubuntu
  • Medium 5.3
    CVE-2026-123585

    Hickory DNS 0.25.0 before 0.26.2 Query Amplification via Irrelevant CNAME Records

    The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME re…

    hickory-dns hickory-dns rust-hickory-resolver rust-hickory-resolver Debian Ubuntu crates.io