https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T09:40:10.797626+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123597 CVE-2026-123597 — Hickory DNS DNSSEC Validation Cache Poisoning via Transient DS-Fetch Errors 2026-11-10T09:40:10.798881+00:00

Affected: hickory-dns

Hickory DNS hickory-proto 0.25.0-alpha.1 through 0.26.0-alpha.1 and hickory-net before 0.26.2 contain a logic bug in DnssecDnsHandle's DS-fetch path that caches transient DS lookup errors as Bogus DNSSEC validation verdicts. An attacker who induces a SERVFAIL, REFUSED, or timeout response to a child-zone DS sub-query causes the validator to return SERVFAIL for all names under that zone until the cache entry's TTL expires.