RUSTSEC-2026-0118Published
Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-123607 · CVE overview and exploitation status
cve-program · CVE-2026-123607
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-3v94-mw7p-v465
- https://www.vulncheck.com/advisories/hickory-dns-nsec3-closest-encloser-proof-unbounded-loop-denial-of-service
euvd · EUVD-2026-119366
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-3v94-mw7p-v465
- https://www.vulncheck.com/advisories/hickory-dns-nsec3-closest-encloser-proof-unbounded-loop-denial-of-service
nvd · CVE-2026-123607
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-3v94-mw7p-v465
- https://www.vulncheck.com/advisories/hickory-dns-nsec3-closest-encloser-proof-unbounded-loop-denial-of-service
osv · GHSA-3v94-mw7p-v465
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-3v94-mw7p-v465
- https://github.com/hickory-dns/hickory-dns
- https://rustsec.org/advisories/RUSTSEC-2026-0118.html
- https://rustsec.org/advisories/RUSTSEC-2026-0120.html
osv · RUSTSEC-2026-0118
- https://crates.io/crates/hickory-proto
- https://rustsec.org/advisories/RUSTSEC-2026-0118.html
- https://github.com/hickory-dns/hickory-dns/pull/3597
osv · RUSTSEC-2026-0120
Related changes
Linked by CVE identifier- Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Ups… · Advisory content revised · 14 Nov 2026
- Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proof validation when the SOA owner is not an ancestor of the QNAME. Ups… · Advisory content revised · 12 Nov 2026
- Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service · Newly collected advisory · 8 Nov 2026
- hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses · Advisory content revised · 8 Nov 2026
- NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses · Advisory content revised · 8 Nov 2026
- NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses · Advisory content revised · 8 Nov 2026