CVE-2026-24030

Name of the Vulnerable Software and Affected Versions DNSdist (affected versions not specified)

Description An attacker can cause a denial of service by tricking the system into allocating excessive memory while processing DNS over QUIC or DNS over HTTP/3 payloads. In environments with significant available memory, this typically triggers an exception that closes the QUIC connection. However, in other scenarios, the system may enter an out-of-memory (OOM) state—a condition where the system lacks enough RAM to operate—resulting in the termination of the process and disruption of DNS resolution. This issue can be triggered by a single crafted QUIC packet and requires no authentication.

Recommendations As a temporary mitigation, disable DNS over QUIC (DoQ) or DNS over HTTP/3 (DoH3). At the moment, there is no information about a newer version that contains a fix for this vulnerability.