Executive brief
hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
Affected products
- crates.io hickory-proto
Junglewise Threat Intelligence
hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
Severity: medium · CVSS 4 · Published 2026-05-07
Technologies: hickory-proto (crates.io). Vendors: crates.io.
Related threats
- hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- RUSTSEC-2026-0118 - NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- RUSTSEC-2026-0119 - CPU exhaustion during message encoding due to O(n²) name compression
- Hickory DNS's DNSSEC validation may accept broken authentication chains
- RUSTSEC-2025-0006 - Hickory DNS failure to verify self-signed RRSIG for DNSKEYs