Report: CVE-2026-24030 - Unbounded memory allocation for DoQ and DoH3
CVE ID :CVE-2026-24030 Published : March 31, 2026, 12:16 p.m. | 1 hour, 45 minutes ago Description :An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...