Security update for dnsdist
This security update for dnsdist addresses two vulnerabilities: CVE-2025-8671, which introduces mitigations for the HTTP/2 MadeYouReset attack, and CVE-2025-30187, a denial of service vulnerability via crafted DNS-over-HTTPS (DoH) exchanges. The update is included in dnsdist version 1.9.11. No specific affected versions are provided. The severity of the denial of service vulnerability is rated low. There is no CVSS score available for these issues.
AI Analysis
Technical Summary
The update to dnsdist 1.9.11 fixes two vulnerabilities. CVE-2025-8671 involves the HTTP/2 MadeYouReset attack, for which mitigations have been added. CVE-2025-30187 is a denial of service vulnerability triggered by crafted DoH exchanges. These issues could potentially disrupt service but no active exploitation is reported. The vendor has released this update to address these security concerns.
Potential Impact
The impact includes potential denial of service conditions caused by specially crafted DNS-over-HTTPS exchanges and vulnerabilities related to HTTP/2 protocol handling. These could lead to service disruption but are rated as low severity. No evidence of exploitation in the wild is reported.
Mitigation Recommendations
Upgrade to dnsdist version 1.9.11 or later, which includes fixes and mitigations for these vulnerabilities. Since this is an official update from the vendor, applying this update is the recommended remediation.
Security update for dnsdist
Description
This security update for dnsdist addresses two vulnerabilities: CVE-2025-8671, which introduces mitigations for the HTTP/2 MadeYouReset attack, and CVE-2025-30187, a denial of service vulnerability via crafted DNS-over-HTTPS (DoH) exchanges. The update is included in dnsdist version 1.9.11. No specific affected versions are provided. The severity of the denial of service vulnerability is rated low. There is no CVSS score available for these issues.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The update to dnsdist 1.9.11 fixes two vulnerabilities. CVE-2025-8671 involves the HTTP/2 MadeYouReset attack, for which mitigations have been added. CVE-2025-30187 is a denial of service vulnerability triggered by crafted DoH exchanges. These issues could potentially disrupt service but no active exploitation is reported. The vendor has released this update to address these security concerns.
Potential Impact
The impact includes potential denial of service conditions caused by specially crafted DNS-over-HTTPS exchanges and vulnerabilities related to HTTP/2 protocol handling. These could lead to service disruption but are rated as low severity. No evidence of exploitation in the wild is reported.
Mitigation Recommendations
Upgrade to dnsdist version 1.9.11 or later, which includes fixes and mitigations for these vulnerabilities. Since this is an official update from the vendor, applying this update is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:20461-1
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-8671"]
- State
- PUBLISHED
Threat ID: 6aab498d55bf5e2cf5990f2b
Added to database: 09/17/2026, 01:59:41 UTC
Last enriched: 09/17/2026, 02:29:26 UTC
Last updated: 09/17/2026, 02:29:26 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.