Skip to content
Threat Feed
Subscribe

Tag

Dnssec

3 briefs RSS
high advisory

DNSSEC Validation Bypass in hickory-resolver

A vulnerability in hickory-resolver versions prior to 0.26.2 causes the library to ignore bogus DNSSEC proof states, allowing attackers to inject forged DNS records as validated data.

hickory-resolver dnssec vulnerability network-security
1t 1c
low advisory

Resource Exhaustion Vulnerability in BIND 9 DNSSEC Validation (CVE-2026-11605)

A resource exhaustion vulnerability, CVE-2026-11605, affects specific versions of ISC BIND 9, where DNSSEC validation disproportionately consumes CPU resources when processing superfluous RRSIG records, potentially leading to a denial of service.

BIND 9 +2 dns dnssec vulnerability denial-of-service resource-exhaustion
1t 1c
medium advisory

Hickory DNS NSEC3 Validation Vulnerability Leads to DoS

A vulnerability in Hickory DNS's NSEC3 closest-encloser proof validation allows a remote attacker to cause a denial of service by exhausting memory when processing crafted DNS responses with mismatched SOA records.

hickory-proto +1 denial-of-service dnssec memory-exhaustion
2r 1t