CVE-2026-123608
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 08, 2026
Vendor
unknown
Description
Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through quadratic-time name compression. Attackers can send malicious DNS messages with many records that add many candidate labels and trigger repeated linear scans during encoding, amplifying CPU exhaustion.