Threats tagged 'ghsa-2qmc-ch65-q9cm'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.7	EPSS 0.3%	CVE-2025-30187In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS Low3.7EPSS 0.3%2025-09-18GCVE DatabaseCVE-2025-30187 A vulnerability in DNSdist occurs when it is configured to use the nghttp2 library for DNS over HTTPS (DoH) queries. An attacker can craft a DoH exchange that triggers an unbounded I/O read loop, leading to excessive CPU consumption and a denial of service condition. The issue has a low severity score and does not impact confidentiality or integrity. EPSS 0.3%Report on CVE-2025-30187 Vulnerability CWE-835 #ghsa-2qmc-ch65-q9cm	GCVE Database	2025-09-18

Page 1 of 1