Mehtab Zafar

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An attacker can send crafted DNS over HTTP/3 queries to trigger an exception that prevents a buffer from being freed immediately. While the buffer is eventually released at the end of the QUIC connection, certain configurations may allow the opening of enough concurrent DoH3 streams to cause an out-of-memory condition, leading to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Recursor (affected versions not specified) **Description** Spoofing replies to the Recursor can lead to an authoritative server IP being incorrectly marked as not supporting EDNS (Extension Mechanisms for DNS), which results in the failure of DNSSEC record validation for that server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A client can trigger excessive memory allocation by generating a large volume of queries routed to an overloaded DNS over HTTPS (DoH) backend. This causes queries to accumulate in a buffer that is not released until the connection ends, potentially leading to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A client can trigger excessive memory allocation by generating numerous error responses over a single DoQ (DNS over QUIC) and DoH3 (DNS over HTTP/3) connection, because certain resources are not properly released until the connection is terminated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PRSD (affected versions not specified) **Description** A denial of service issue exists during PRSD detection. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.