Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8mqg-g8g6-fvw6

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.

EPSS

Процентиль: 22%
0.00296
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.

CVSS3: 5.3
nvd
около 2 месяцев назад

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.

CVSS3: 5.3
debian
около 2 месяцев назад

An attacker can send crafted DNS over HTTP/3 queries, triggering an ex ...

suse-cvrf
13 дней назад

Security update for dnsdist

EPSS

Процентиль: 22%
0.00296
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-770