Vulnetix
Try Vulnetix Request Demo
CVE-2025-30187 PUBLISHED CVSS 3.700000047683716 LOW

In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries, an attacker might be able to cause a denial of service by crafting a DoH exchange that triggers an unbounded I/O read loop, causing an unexpected consumption of CPU resources.

EPSS 0.01% · 1.1th percentile

Risk Scores

CVSS v3.1
3.700000047683716
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.01%
1.1th percentile

Affected Products

VendorProductVersions
PowerDNSDNSdist1.9.0, 2.0.0

Timeline

References

Open in Interactive Console →