Threats tagged 'rustsec-2026-0118'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.3%	CVE-2026-123607Hickory proto · NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses High8.7EPSS 0.3%2026-05-01GCVE DatabaseCVE-2026-123607 A vulnerability in the Hickory proto library's DNSSEC validation logic causes an unbounded loop when validating certain DNS responses with mismatched SOA records. This can lead to a denial-of-service via memory exhaustion in release builds or a panic in debug builds. The issue affects versions from 0.25.0-alpha.3 up to but not including 0.26.0-beta.1 and is fixed in 0.26.0-beta.1. EPSS 0.3%Report on CVE-2026-123607 Vulnerability #rustsec-2026-0118 #crates-io	GCVE Database	2026-05-01

Page 1 of 1