Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-24030

Опубликовано: 31 мар. 2026
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 1.9.0 (включая) до 1.9.12 (исключая)
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 2.0.0 (включая) до 2.0.3 (исключая)

EPSS

Процентиль: 43%
0.00537
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-789

Связанные уязвимости

CVSS3: 5.3
ubuntu
5 месяцев назад

An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.

CVSS3: 5.3
debian
5 месяцев назад

An attacker might be able to trick DNSdist into allocating too much me ...

CVSS3: 7.5
redos
8 дней назад

Уязвимость dnsdist

CVSS3: 7.5
redos
8 дней назад

Уязвимость dnsdist

CVSS3: 5.3
github
5 месяцев назад

An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.

EPSS

Процентиль: 43%
0.00537
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-789