https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 09:56:13 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-123585 <p>The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name&#39;s CNAME chain, causing excess resolver queries and increased query amplification.</p> <p>The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name&#39;s CNAME chain, causing excess resolver queries and increased query amplification.</p> https://db.gcve.eu/vuln/fkie_cve-2026-123585 https://db.gcve.eu/vuln/ghsa-qw4x-w9jf-pmv6 <p>The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name&#39;s CNAME chain, causing excess resolver queries and increased query amplification.</p> <p>The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name&#39;s CNAME chain, causing excess resolver queries and increased query amplification.</p> https://db.gcve.eu/vuln/ghsa-qw4x-w9jf-pmv6 https://db.gcve.eu/vuln/ubuntu-cve-2026-123585 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-hickory-resolver, Ubuntu:26.10: rust-hickory-resolver, Ubuntu:26.04:LTS: rust-hickory-resolver</p> <p>The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name&#39;s CNAME chain, causing excess resolver queries and increased query amplification.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-hickory-resolver, Ubuntu:26.10: rust-hickory-resolver, Ubuntu:26.04:LTS: rust-hickory-resolver</p> <p>The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are unnecessary to answer the original request. Attackers controlling DNS responses can include CNAME records in the authority or additional sections, or outside the original query name&#39;s CNAME chain, causing excess resolver queries and increased query amplification.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-123585