Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/28 10:40 p.m.16 views

GHSA-2WPX-QPW2-G5H5 CoreDNS' DoQ worker pool does not bound stream backlog

Summary CoreDNS' DNS-over-QUIC DoQ server can be driven into large goroutine and memory growth by a remote client that opens many QUIC streams and stalls after sending only 1 byte. Even with a small configured quic workerpoolsize ... , CoreDNS still spawns a goroutine per accepted stream workers ...

8.7CVSS5.8AI score0.00469EPSS
SaveExploits1References5
Rows per page
Query Builder