https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T10:25:45.350737+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123598 fkie_cve-2026-123598 2026-11-10T10:25:45.353608+00:00

The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net 0.26.0-beta.1 before 0.26.2 caches DNSSEC-bogus answers using the untrusted, attacker-supplied record TTL (capped at 24 hours) instead of a short validation-failure TTL. A remote attacker who spoofs a single authoritative response with an invalid signature and a long TTL can keep the bogus result cached for up to 24 hours.

 https://db.gcve.eu/vuln/ghsa-p25q-gxfm-cmhr GHSA-p25q-gxfm-cmhr 2026-11-10T10:25:45.353719+00:00

The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net 0.26.0-beta.1 before 0.26.2 caches DNSSEC-bogus answers using the untrusted, attacker-supplied record TTL (capped at 24 hours) instead of a short validation-failure TTL. A remote attacker who spoofs a single authoritative response with an invalid signature and a long TTL can keep the bogus result cached for up to 24 hours.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-123598 UBUNTU-CVE-2026-123598 2026-11-10T10:25:45.353757+00:00

Affected: Ubuntu:24.04:LTS: rust-hickory-resolver, Ubuntu:26.10: rust-hickory-net, Ubuntu:26.10: rust-hickory-recursor, Ubuntu:26.10: rust-hickory-resolver, Ubuntu:26.04:LTS: rust-hickory-recursor, Ubuntu:26.04:LTS: rust-hickory-resolver

The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net 0.26.0-beta.1 before 0.26.2 caches DNSSEC-bogus answers using the untrusted, attacker-supplied record TTL (capped at 24 hours) instead of a short validation-failure TTL. A remote attacker who spoofs a single authoritative response with an invalid signature and a long TTL can keep the bogus result cached for up to 24 hours.