Vendor

    Hickory-dns

    41 known vulnerabilities in products by Hickory-dns, 0 of them actively exploited (CISA KEV).

    Key figures

    41

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Hickory-dns
    HighCVE-2026-123606

    Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification

    		7.5
    HighCVE-2026-123577

    Hickory DNS 0.24.0 before 0.26.2 DoH Unbounded Request Body Denial of Service

    		7.5
    HighCVE-2026-123570

    Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts

    		7.5
    HighCVE-2026-123608

    Hickory DNS hickory-proto 0.3.1 before 0.26.1 CPU Exhaustion via BinEncoder Name Compression

    		7.5
    HighCVE-2026-123576

    Hickory DNS 0.24.0 through 0.26.1 Memory Exhaustion via DNS-over-QUIC Requests

    		7.5
    HighCVE-2026-123575

    Hickory DNS before 0.26.2 DoH Memory Exhaustion via Incomplete Request Bodies

    		7.5
    HighCVE-2026-123571

    Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding

    		7.5
    HighCVE-2026-123586

    Hickory DNS 0.25.0-alpha.3 through 0.25.2 Query Amplification via Cyclic Referrals

    		7.5
    HighCVE-2026-123574

    Hickory DNS 0.24.0 before 0.26.2 Denial of Service via Zone File Parser

    		7.5
    HighCVE-2026-123573

    hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser

    		7.5
    HighCVE-2026-123607

    Hickory DNS NSEC3 Closest-Encloser Proof Unbounded Loop Denial of Service

    		7.5
    HighCVE-2026-123604

    Hickory-dns: Infinite Loop

    		7.5
    HighCVE-2026-123588

    Hickory DNS Recursive Resolver Denial of Service via Cached Empty Connection Pool

    		7.5
    HighCVE-2026-123572

    Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser

    		7.5
    HighCVE-2026-123584

    Hickory-DNS 0.26.0 before 0.26.2 UDP Client Denial of Service via Spoofed Responses

    		5.9
    HighCVE-2026-123587

    Hickory-DNS 0.26.0 before 0.26.2 DNSSEC Nonexistence Forgery via Wraparound NSEC

    		6.8
    HighCVE-2026-123580

    Hickory-DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Nonexistence Proof Forgery via NSEC3

    		7.5
    HighCVE-2026-123605

    Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name

    		8.8
    HighCVE-2026-123601

    Hickory DNS 0.26.0-beta.1 before 0.26.2 NSEC3 Proof of Nonexistence Forgery

    		6.5
    HighCVE-2026-123596

    Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC

    		8.8
    HighCVE-2026-123595

    Hickory DNS through 0.26.0-alpha.1 DNSSEC Validation Bypass via Ancestor-Delegation NSEC3

    		8.8
    HighCVE-2026-123592

    Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Name Hash Collision

    		5.9
    HighCVE-2026-123602

    Hickory DNS Recursor Ghost Domain Attack via Child-Side NS RRset Caching

    		5.9
    HighCVE-2026-123591

    Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via Missing RFC 6840 Checks

    		5.9
    MediumCVE-2026-123589

    Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout

    		5.3

    All vulnerabilities in search

    Products

    Products by Hickory-dns
    Hickory-dns400