https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T20:12:10.166903+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123570 CVE-2026-123570 — Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts 2026-11-11T20:12:10.168316+00:00

Affected: hickory-dns

The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, or a spoofed response to a client/resolver, with these counts set to 65535, forcing about 18MB of allocation per message.