Executive brief
Hickory DNS's DNSSEC validation may accept broken authentication chains
Affected products
- crates.io hickory-proto
Junglewise Threat Intelligence
CVE-2025-25188: Hickory DNS's DNSSEC validation may accept broken authentication chains
CVE-2025-25188 · Severity: medium · CVSS 4 · Published 2025-02-10
Technologies: hickory-proto (crates.io). Vendors: crates.io.
Related threats
- hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
- hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- RUSTSEC-2026-0118 - NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- RUSTSEC-2026-0119 - CPU exhaustion during message encoding due to O(n²) name compression
- RUSTSEC-2025-0006 - Hickory DNS failure to verify self-signed RRSIG for DNSKEYs