CVE-2025-30187: falha de baixa gravidade em PowerDNS DNSdist
Denial of service via crafted DoH exchange in PowerDNS DNSdist
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.3%
In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries, an attacker might be able to cause a denial of service by crafting a DoH exchange that triggers an unbounded I/O read loop, causing an unexpected consumption of CPU resources.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
PowerDNS · DNSdistCVEs relacionadas — PowerDNS DNSdist
No mesmo produto, das mais perigosas para as menos.
CVE-2025-30194HIGHDenial of service via crafted DoH exchangeEPSS 2.3%CVE-2024-25581HIGHTransfer requests received over DoH can lead to a denial of service in DNSdistEPSS 1.1%CVE-2026-33598MEDIUMOut-of-bounds read in cache inspection via LuaEPSS 1.1%CVE-2026-24028MEDIUMOut-of-bounds read when parsing DNS packets via LuaEPSS 1.1%CVE-2026-40210MEDIUMOut-of-bounds read in SetMacAddrActionEPSS 0.7%CVE-2026-33602MEDIUMOff-by-one access when processing crafted UDP responsesEPSS 0.7%