https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T09:40:11.344147+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123589 CVE-2026-123589 — Hickory DNS before 0.26.2 Denial of Service via Missing DNS-over-QUIC Request Read Timeout 2026-11-10T09:40:11.345702+00:00

Affected: hickory-dns

The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when reading a request message from a QUIC stream, bypassing all configured timeouts. A remote unauthenticated client can open a connection and a request stream and hold it open indefinitely, consuming server resources and causing a denial of service.