Executive brief
Hickory DNS failure to verify self-signed RRSIG for DNSKEYs
Affected products
- crates.io hickory-proto
Junglewise Threat Intelligence
RUSTSEC-2025-0006 - Hickory DNS failure to verify self-signed RRSIG for DNSKEYs
Severity: info · Published 2025-02-07
Technologies: hickory-proto (crates.io). Vendors: crates.io.
Related threats
- hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression
- hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- RUSTSEC-2026-0118 - NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
- RUSTSEC-2026-0119 - CPU exhaustion during message encoding due to O(n²) name compression
- Hickory DNS's DNSSEC validation may accept broken authentication chains