Bug 2568807 (CVE-2026-123574)
| Summary: | CVE-2026-123574 hickory-proto: hickory-proto: Denial of Service via oversized token in zone file parser | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | dbosanac, jcantril, jlanda, jreimann, kshier, mdessi, mrizzi, pcattana, rbobbitt, rhel-process-autobot, rojacob, simaishi, stcannon, watson-tool-maintainers, yguenane |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in hickory-proto. The zone file parser fails to handle overly long inputs and crashes when processing a single token that is 4,096 bytes or longer. An attacker who can supply an untrusted zone file to an application using the parser can exploit this flaw to crash the service, resulting in a Denial of Service (DoS).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-11-08 02:06:17 UTC
|