470 matches found
unbound: Unbound: Denial of Service via improper validation of DNS-over-QUIC client length
A flaw was found in Unbound when DNS-over-QUIC DoQ is enabled. An attacker could exploit improper validation of client-provided data length, leading to excessive memory allocation. This can cause the system to exceed its configured memory limits for QUIC connections, resulting in a Denial of...