Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-123579 | 3.7 | DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 does not distinguish NODATA responses from wildcard-expanded positive responses. For a query that should return NODATA in a zone with wi | 2026-11-08 02:16:51 | 2026-11-08 02:16:51 |
| CVE-2026-123578 | 3.7 | Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section (QDCOUNT=0), and also skip the case-randomiza | 2026-11-08 02:16:51 | 2026-11-08 02:16:51 |
| CVE-2026-123577 | 7.5 | Hickory DNS from 0.24.0 before 0.26.2 contains a resource exhaustion vulnerability that allows remote attackers to consume server memory via unbounded DoH request bodies. Attackers can send large request bodies over HTTP/2 or HTTP/3 to a DNS over HTT | 2026-11-08 02:16:51 | 2026-11-08 02:16:51 |
| CVE-2026-123576 | 7.5 | Hickory DNS 0.24.0 through 0.26.1 contains a memory exhaustion vulnerability that allows remote attackers to consume server resources by sending incomplete DNS-over-QUIC request bodies. Attackers can open many connections and send only large length p | 2026-11-08 02:16:50 | 2026-11-08 02:16:50 |
| CVE-2026-123575 | 7.5 | Hickory DNS before 0.26.2 contains a resource exhaustion vulnerability in its DNS-over-HTTPS HTTP/2 server that lacks sufficient timeouts or limits for incomplete request bodies. Remote attackers can open DoH connections, send incomplete request bodi | 2026-11-08 02:16:50 | 2026-11-08 02:16:50 |
| CVE-2026-123574 | 7.5 | The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is 4096 bytes or longer. Attackers who can supply untrusted zone files to an application using the parser can trigger the pa | 2026-11-08 02:16:50 | 2026-11-08 02:16:50 |
| CVE-2026-123573 | 7.5 | hickory-dns from 0.20.1 before 0.26.2 contains a denial of service vulnerability in the hickory-proto SVCB and HTTPS record presentation format parser. Attackers can supply untrusted zone files where only a single or double quote replaces a service p | 2026-11-08 02:16:50 | 2026-11-08 02:16:50 |
| CVE-2026-123572 | 7.5 | Hickory-dns from 0.20.1 before 0.26.2 contains a denial of service vulnerability in the hickory-proto SVCB and HTTPS record presentation format parser, which panics on malformed alpn values. Attackers can supply untrusted zone files with unbalanced q | 2026-11-08 02:16:50 | 2026-11-08 02:16:50 |
| CVE-2026-123571 | 7.5 | Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via malformed records. Attackers can send a crafted TSIG record in DNS wire format to cause unche | 2026-11-08 02:16:49 | 2026-11-08 02:16:49 |
| CVE-2026-123570 | 7.5 | The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. Remote attackers can send a UDP datagram, | 2026-11-08 02:16:49 | 2026-11-08 02:16:49 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12486
Zapisa po stranici: