CVE WATCH / VULNERABILITY DETAIL
CVE-2026-123574
HIGHCVSS 7.5NVD feed
Published 8 November 2026 · tracked since 8 November 2026
Description
The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is 4096 bytes or longer. Attackers who can supply untrusted zone files to an application using the parser can trigger the panic to cause a denial of service.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog