CVE-2026-24030
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Mar 31, 2026
Vendor
unknown
Description
An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.