RUSTSEC-2026-0119Published
Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-123608 · CVE overview and exploitation status
cve-program · CVE-2026-123608
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-q2qq-hmj6-3wpp
- https://www.vulncheck.com/advisories/hickory-dns-hickory-proto-0.3.1-before-0.26.1-cpu-exhaustion-via-binencoder-name-compression
euvd · EUVD-2026-119367
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-q2qq-hmj6-3wpp
- https://www.vulncheck.com/advisories/hickory-dns-hickory-proto-0.3.1-before-0.26.1-cpu-exhaustion-via-binencoder-name-compression
nvd · CVE-2026-123608
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-q2qq-hmj6-3wpp
- https://www.vulncheck.com/advisories/hickory-dns-hickory-proto-0.3.1-before-0.26.1-cpu-exhaustion-via-binencoder-name-compression
osv · GHSA-q2qq-hmj6-3wpp
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-q2qq-hmj6-3wpp
- https://github.com/hickory-dns/hickory-dns
- https://rustsec.org/advisories/RUSTSEC-2026-0119.html
osv · RUSTSEC-2026-0119
Related changes
Linked by CVE identifier- Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression. Attackers can send malicious DNS messages with … · Advisory content revised · 14 Nov 2026
- Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression. Attackers can send malicious DNS messages with … · Advisory content revised · 14 Nov 2026
- Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression. Attackers can send malicious DNS messages with … · Advisory content revised · 12 Nov 2026
- Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression · Newly collected advisory · 8 Nov 2026
- hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression · Advisory content revised · 8 Nov 2026
- CPU exhaustion during message encoding due to O(n²) name compression · Advisory content revised · 8 Nov 2026