CVE-2025-25188
1 advisory.
crates.io/hickory-proto CVE-2025-25188: medium 5.7, EPSS 0.28%
Hickory DNS's DNSSEC validation may accept broken authentication chains
Action: Upgrade hickory-proto to 0.24.3 or later.
cargo update -p hickory-proto --precise 0.24.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.8.0 | 0.24.3 | - |
Fixed versions
| 0.24.3 |
Sources
- osv: GHSA-37wc-h8xc-5hc4
- nvd: CVE-2025-25188
- https://github.com/hickory-dns/hickory-dns/security/advisories/GHSA-37wc-h8xc-5hc4
- https://github.com/hickory-dns/hickory-dns/commit/e118c6eec569f4340421f86ee0686714010c63e9
- https://github.com/hickory-dns/hickory-dns
CVE-2025-25188 · published · modified · JSON