CVE Vulnerabilities

CVE-2025-30187

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Sep 18, 2025 | Modified: Sep 18, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries, an attacker might be able to cause a denial of service by crafting a DoH exchange that triggers an unbounded I/O read loop, causing an unexpected consumption of CPU resources.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References