Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v2vv-6q75-rvc9

Опубликовано: 31 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.

An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.

EPSS

Процентиль: 2%
0.00012
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-789

Связанные уязвимости

CVSS3: 5.3
ubuntu
1 день назад

[Unknown description]

CVSS3: 5.3
nvd
2 дня назад

An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.

CVSS3: 5.3
debian
2 дня назад

An attacker might be able to trick DNSdist into allocating too much me ...

EPSS

Процентиль: 2%
0.00012
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-789