Query Amplification Vulnerability in Hickory DNS by Hickory

CVE-2026-123585

What is CVE-2026-123585?

The hickory-resolver component in Hickory DNS versions prior to 0.26.2 exhibits a vulnerability that permits attackers to manipulate DNS resolution behavior. By injecting irrelevant CNAME records into the response, adversaries can generate excessive resolver queries, which leads to increased traffic and potential service disruption. This flaw enables the exploitation of DNS queries in a way that amplifies the traffic directed at the resolver, making it vulnerable to further attacks.

References