Skip to content
OpenAdvisories

Package · Ubuntu

rust-hickory-server

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Hickory DNS Missing IPv4-Mapped IPv6 Canonicalization Access Control Bypass

    hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hickory-recursor 0.25.0-alpha.3 through 0.26.0-alpha.1 fail to canonicalize IPv4-mapped IPv6 addresses when checking deny_answers, deny_server, or Access…

  • Medium 5.3

    Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout

    The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when reading a request message from a QUIC stream, bypassing all configured timeouts. A remote unauthenticated client can open a connection and a request s…