EUVD-2026-119365Published
Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-123606 · CVE overview and exploitation status
cve-program · CVE-2026-123606
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-6h5c-jjg5-wj59
- https://www.vulncheck.com/advisories/hickory-dns-recursor-0.25.0-alpha.3-through-0.25.2-glueless-ns-referral-amplification
euvd · EUVD-2026-119365
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-6h5c-jjg5-wj59
- https://www.vulncheck.com/advisories/hickory-dns-recursor-0.25.0-alpha.3-through-0.25.2-glueless-ns-referral-amplification
nvd · CVE-2026-123606
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-6h5c-jjg5-wj59
- https://www.vulncheck.com/advisories/hickory-dns-recursor-0.25.0-alpha.3-through-0.25.2-glueless-ns-referral-amplification
osv · RUSTSEC-2026-0515
- https://crates.io/crates/hickory-resolver
- https://rustsec.org/advisories/RUSTSEC-2026-0515.html
- https://github.com/hickory-dns/hickory-dns/commit/74062f3a3ef6904b64717dd025945702b2cf4133
- https://github.com/hickory-dns/hickory-dns/commit/47cd005b8f3d190134bbb943d2328ef8a83ade8c
osv · RUSTSEC-2026-0521
Related changes
Linked by CVE identifier- Recursor followed every glueless name server in a referral, with no per-query budget · Newly collected advisory · 12 Nov 2026
- Recursor followed every glueless name server in a referral (no fixed hickory-recursor release) · Newly collected advisory · 12 Nov 2026
- Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification · Newly collected advisory · 8 Nov 2026