RUSTSEC-2026-0516Published
Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-123586 · CVE overview and exploitation status
cve-program · CVE-2026-123586
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-cx5j-p54p-q756
- https://www.vulncheck.com/advisories/hickory-dns-0.25.0-alpha.3-through-0.25.2-query-amplification-via-cyclic-referrals
euvd · EUVD-2026-119345
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-cx5j-p54p-q756
- https://www.vulncheck.com/advisories/hickory-dns-0.25.0-alpha.3-through-0.25.2-query-amplification-via-cyclic-referrals
nvd · CVE-2026-123586
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-cx5j-p54p-q756
- https://www.vulncheck.com/advisories/hickory-dns-0.25.0-alpha.3-through-0.25.2-query-amplification-via-cyclic-referrals
osv · RUSTSEC-2026-0516
- https://crates.io/crates/hickory-resolver
- https://rustsec.org/advisories/RUSTSEC-2026-0516.html
- https://github.com/hickory-dns/hickory-dns/commit/308dcfd5cd9bfaa50c956427380160505e5de532
osv · RUSTSEC-2026-0522
Related changes
Linked by CVE identifier- Recursor kept querying cyclic glueless sibling delegations · Newly collected advisory · 12 Nov 2026
- Recursor kept querying cyclic glueless sibling delegations (no fixed hickory-recursor release) · Newly collected advisory · 12 Nov 2026
- Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals · Newly collected advisory · 8 Nov 2026