VDB
GHSA-6w6g-hm98-mhgm
GHSA-6w6g-hm98-mhgm
PUBLISHED
CVSS 7.5 HIGH
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | ntpd-rs | 0 |
| chainguard | shadowsocks-rust | 0 |
| wolfi | vector | 0 |
| wolfi | sccache | 0 |
| wolfi | shadowsocks-rust | 0 |
| crates.io | hickory-resolver | 0.26.0-beta.1 |
| wolfi | linkerd2-proxy | 0 |
| chainguard | sccache | 0 |
| chainguard | ntpd-rs | 0 |
Timeline
- Oct 5, 2026 CVE Published
References
- https://github.com/advisories/GHSA-6w6g-hm98-mhgm advisory
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-6w6g-hm98-mhgm url
- https://github.com/hickory-dns/hickory-dns/pull/3871 patch
- https://github.com/hickory-dns/hickory-dns/commit/0848d2e9e4183499343318a690d6dd5e48bc21c1 patch
- https://github.com/hickory-dns/hickory-dns/commit/5d37e2e04a36a87013a213b58b820345ef76a263 patch
- https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.2 url