PT-2025-38305 · Dnsdist+3 · Dnsdist+3

Published 2025-09-18 · Updated 2026-04-02 · CVE-2025-30187

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions DNSdist (affected versions not specified)

Description DNSdist, when configured to utilize the nghttp2 library for processing DNS over HTTPS (DoH) queries, may be susceptible to a denial of service. A crafted DoH exchange can trigger an unbounded I/O read loop, leading to excessive CPU resource consumption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2025-30187

OPENSUSE-SU-2026:20461-1

SUSE-SU-2026:0888-1

SUSE-SU-2026:20995-1

USN-8037-1

Affected Products

Dnsdist

Linuxmint

Ubuntu

Nghttp2

References · 29

• https://osv.dev/vulnerability/USN-8037-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30187 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-30187 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30193 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-30187 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20461-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0888-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8037-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30187 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8671 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20995-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-30187 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-30187 · Security Note
• https://twitter.com/CVEnew/status/1968923644668547572 · Twitter Post
• http://openwall.com/lists/oss-security/2025/09/18/1 · Note