CVE-2025-30187
Denial of service via crafted DoH exchange in PowerDNS DNSdist
Résumé
Denial of service via crafted DoH exchange in PowerDNS DNSdist
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries, an attacker might be able to cause a denial of service by crafting a DoH exchange that triggers an unbounded I/O read loop, causing an unexpected consumption of CPU resources.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-30187 dnsdist Corrigé dans: 1.9.10-1+deb13u1
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory dnsdist.org
- package github.com
- web openwall.com
- web repo.powerdns.com