Search
320 CVEs · published 2026-11-08 to 2026-11-08
CVEs (320)
Showing 201–225 of 320
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-123612 | MEDIUM | 2.3 | 2026-11-08 | rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the client-facing server w… | |
| CVE-2026-123611 | MEDIUM | Patched | 3.7 | 2026-11-08 | rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthent… |
| CVE-2026-123610 | MEDIUM | Patched | 3.7 | 2026-11-08 | rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an… |
| CVE-2026-123609 | MEDIUM | Patched | 4.0 | 2026-11-08 | Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client session values exposes … |
| CVE-2026-123608 | HIGH | Patched | 7.5 | 2026-11-08 | Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-ti… |
| CVE-2026-123607 | HIGH | Patched | 7.5 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-encloser proo… |
| CVE-2026-123606 | HIGH | Patched | 7.5 | 2026-11-08 | The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-resolver 0.26.0-alpha.1 before 0.26.2 iterates every out-of-bailiwick NS target lacki… |
| CVE-2026-123605 | HIGH | Patched | 8.8 | 2026-11-08 | Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because the validator verifies an RRSIG against the DN… |
| CVE-2026-123604 | HIGH | Patched | 7.5 | 2026-11-08 | Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::try_send, which re-queues truncated (TC) responses without chec… |
| CVE-2026-123603 | MEDIUM | Patched | 6.5 | 2026-11-08 | hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hickory-recursor 0.25.0-alpha.3 through 0.26.0-alpha.1 fail to can… |
| CVE-2026-123602 | HIGH | Patched | 5.9 | 2026-11-08 | The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2 (recursor feature) is vulnerable to ghost domain names atta… |
| CVE-2026-123601 | HIGH | Patched | 6.5 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the relational operators in the wrap-around branch of find_coveri… |
| CVE-2026-123600 | MEDIUM | Patched | 4.8 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net 0.26.0-alpha.1 before 0.26.2 contain a DNSSEC validation flaw in DnssecDnsHandle that accepts NSEC3-… |
| CVE-2026-123599 | MEDIUM | Patched | 3.7 | 2026-11-08 | Hickory DNS hickory-proto before 0.26.0-beta.1 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because verify_rrsets() ignores DNS class when partitioning … |
| CVE-2026-123598 | MEDIUM | Patched | 3.7 | 2026-11-08 | The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net 0.26.0-beta.1 before 0… |
| CVE-2026-123597 | MEDIUM | Patched | 3.7 | 2026-11-08 | Hickory DNS hickory-proto 0.25.0-alpha.1 through 0.26.0-alpha.1 and hickory-net before 0.26.2 contain a logic bug in DnssecDnsHandle's DS-fetch path that caches transient D… |
| CVE-2026-123596 | HIGH | Patched | 8.8 | 2026-11-08 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC handler that… |
| CVE-2026-123595 | HIGH | Patched | 8.8 | 2026-11-08 | Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC3 handle… |
| CVE-2026-123594 | MEDIUM | Patched | 4.8 | 2026-11-08 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain an NSEC validation flaw that returns a secure proof for NXDOMAIN respon… |
| CVE-2026-123593 | MEDIUM | Patched | 4.8 | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26.0-alpha.1 compare DNSKEY public keys against DNSSEC trust anchors without checking… |
| CVE-2026-123592 | HIGH | Patched | 5.9 | 2026-11-08 | The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash ignores label lengths and ValidationCacheKey compares o… |
| CVE-2026-123591 | HIGH | Patched | 5.9 | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 fail to verify, per RFC 6840 §4.4, that an NSEC or NSEC3 record denying a DS RR… |
| CVE-2026-123590 | MEDIUM | Patched | 4.8 | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 accept NSEC and NSEC3 records for DNSSEC nonexistence proofs when any other rec… |
| CVE-2026-123589 | MEDIUM | Patched | 5.3 | 2026-11-08 | The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when reading a request message from a QUIC stream, bypassing all con… |
| CVE-2026-123588 | HIGH | Patched | 7.5 | 2026-11-08 | The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool when it follow… |