tocsin

Alpine/dnsdist: high 7.5

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

Action: Upgrade dnsdist to 2.0.4-r0 or later.

Affected

introducedfixedlast affected
1.9.02.0.4-r0-

Fixed versions

2.0.4-r0

Sources

published · modified · JSON