https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T09:56:12.990396+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123585 fkie_cve-2026-123585 2026-11-10T09:56:12.991993+00:00

The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name's CNAME chain, causing excess resolver queries and increased query amplification.

 https://db.gcve.eu/vuln/ghsa-qw4x-w9jf-pmv6 GHSA-qw4x-w9jf-pmv6 2026-11-10T09:56:12.992074+00:00

The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name's CNAME chain, causing excess resolver queries and increased query amplification.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-123585 UBUNTU-CVE-2026-123585 2026-11-10T09:56:12.992096+00:00

Affected: Ubuntu:24.04:LTS: rust-hickory-resolver, Ubuntu:26.10: rust-hickory-resolver, Ubuntu:26.04:LTS: rust-hickory-resolver

The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name's CNAME chain, causing excess resolver queries and increased query amplification.