Threats tagged 'ghsa-p3hw-2hh6-3p6w'

Hickory DNS versions prior to 0.26.2 have a resource exhaustion vulnerability in their DNS-over-HTTPS HTTP/2 server. The server does not enforce sufficient timeouts or limits on incomplete request bodies, allowing remote attackers to open connections with incomplete requests and hold them open. This can exhaust server memory and cause denial of service.