CVE ID :CVE-2026-123588 Published : Nov. 8, 2026, 2:16 a.m. | 57 minutes ago Description :The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool when it follows a referral with no glue...

#Sicherheitslücke #DDoS

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-123588 - Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool

VERWANDTEARTIKEL

CVE-2026-114713 - UnrealIRCd IRCv3 Label Message Tag Command Injection

CVE-2026-123615 - imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader

CVE-2026-123616 - imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader

CVE-2026-123614 - imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

CVE-2026-123604 - Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop

CVE-2026-123605 - Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name