Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hh36-f69g-hq4h

Опубликовано: 31 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.

EPSS

Процентиль: 5%
0.00148
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
ubuntu
5 месяцев назад

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.

CVSS3: 6.5
nvd
5 месяцев назад

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.

CVSS3: 6.5
debian
5 месяцев назад

When the early_acl_drop (earlyACLDrop in Lua) option is disabled (defa ...

CVSS3: 6.5
redos
8 дней назад

Уязвимость dnsdist

suse-cvrf
4 месяца назад

Security update for dnsdist

EPSS

Процентиль: 5%
0.00148
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863