Threats tagged 'ghsa-j6hp-65pf-mqr7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.3	CVE-2026-123578Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP Medium6.32026-11-08GCVE DatabaseCVE-2026-123578 Hickory DNS components hickory-net versions before 0.26.2 and hickory-proto versions 0.25.0 through 0.25.2 have a vulnerability where UDP DNS responses with an empty question section (QDCOUNT=0) bypass validation checks. This allows remote attackers who can inject spoofed UDP responses to circumvent question section matching and case-randomization checks, weakening DNS spoofing defenses. Report on CVE-2026-123578 Vulnerability CWE-290 #ghsa-j6hp-65pf-mqr7	GCVE Database	2026-11-08

Page 1 of 1