Threats tagged 'rustsec-2026-0119'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.4%	CVE-2026-123608Hickory proto · CPU exhaustion during message encoding due to O(n²) name compression High8.7EPSS 0.4%2026-05-01GCVE DatabaseCVE-2026-123608 A vulnerability in hickory-proto's BinEncoder causes CPU exhaustion during message encoding due to an O(n²) complexity in name compression. The encoder stores candidate labels in a vector and performs linear scans to find matches, which can be exploited by malicious messages with many records to cause denial-of-service (DoS) via CPU exhaustion. The issue is fixed in version 0.26.1. EPSS 0.4%Report on CVE-2026-123608 Vulnerability #rustsec-2026-0119 #crates-io	GCVE Database	2026-05-01

Page 1 of 1