This vulnerability involves incorrect control flow scoping in PowerDNS DNSdist's handling of DoH3 GET queries. An attacker can exploit this by sending DoH3 GET queries with invalid DATA frames, causing delays in processing these queries. The CVSS 3.1 base score is 3.7 (low), reflecting that the attack requires network access with high attack complexity and results only in availability impact (query processing delay) without affecting confidentiality or integrity. Affected versions include 1.9.0, 2.0.0, all versions from 1.9.0 up to but not including 1.9.15, and from 2.0.0 up to but not including 2.0.7. No known exploits are reported in the wild, and no official remediation or patch information is currently available.

The vulnerability allows an attacker to delay the processing of DoH3 queries, potentially causing a denial of service condition by slowing down DNS query handling. There is no impact on data confidentiality or integrity. The attack requires network access and has high complexity, limiting its practical exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for unusual delays in DoH3 query processing and consider limiting exposure of DNSdist DoH3 services to untrusted networks. No official fix or temporary workaround is currently documented.