Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-40011

Опубликовано: 25 июн. 2026
Источник: nvd
CVSS3: 3.7
EPSS Низкий

Описание

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

EPSS

Процентиль: 13%
0.00225
Низкий

3.7 Low

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 3.7
ubuntu
5 месяцев назад

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

CVSS3: 3.7
debian
5 месяцев назад

An attacker sending a large number of crafted DNS queries might be abl ...

CVSS3: 3.7
github
5 месяцев назад

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

suse-cvrf
3 месяца назад

Security update for dnsdist

CVSS3: 5.3
altlinux
11 дней назад

ALT-PU-2026-20103: package `dnsdist` update to version 1.9.16-alt1

EPSS

Процентиль: 13%
0.00225
Низкий

3.7 Low

CVSS3

Дефекты

CWE-116