Executive brief
hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
Affected products
- crates.io hickory-proto
- crates.io hickory-net
Junglewise Threat Intelligence
hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
Severity: medium · CVSS 4 · Published 2026-05-07
Technologies: hickory-proto (crates.io). Vendors: crates.io.
Related threats
- hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
- RUSTSEC-2026-0118 - NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- RUSTSEC-2026-0119 - CPU exhaustion during message encoding due to O(n²) name compression
- RUSTSEC-2026-0120 - NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- Hickory DNS's DNSSEC validation may accept broken authentication chains