Verified

ghsa:GHSA-6W6G-HM98-MHGM: hickory-resolver >= 0.26.0-beta.1, < 0.26.2

hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS). Affected range: >= 0.26.0-beta.1, < 0.26.2. Fixed version: 0.26.2.

Affected technology

hickory-resolver · >= 0.26.0-beta.1, < 0.26.2
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 12-Oct-2026 10:15 UTC

Product: hickory-resolver
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-6w6g-hm98-mhgm.html