Medium severity5.9NVD Advisory· Published Nov 8, 2026
CVE-2026-123584
CVE-2026-123584
Description
The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP connection receives a datagram that cannot be parsed as a DNS message. Remote attackers who guess the query's source port, without knowing the transaction ID, can spoof malformed responses to abort client queries, causing denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <0.26.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.