Skip to content
Threat Feed
Subscribe

Product

Hickory-Resolver (>= 0.26.0-Beta.1, < 0.26.2)

1 brief RSS
medium advisory

Resource Exhaustion in hickory-resolver via Unbounded TC-Retry Loop

The hickory-resolver DNS library is vulnerable to a denial-of-service condition (CVE-2025-27150) where a malicious authoritative nameserver can induce an infinite retry loop by returning truncated responses.

hickory-resolver denial-of-service dns rust cve-2025-27150
1c