CVE-2025-30187
In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries, an attacker might be able to cause a denial of service by crafting a DoH exchange that triggers an unbounded I/O read loop, causing an unexpected consumption of CPU resources.
- Score
- CVSS 3.1 3.7 Low
- Status
- Deferred - security@open-xchange.com
- Published
- 2025-09-18
- Last modified
- 2025-11-04
- Weaknesses
- CWE-835
Affected products
References
- https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-05.html
- http://www.openwall.com/lists/oss-security/2025/09/18/1
