CVE-2026-40011: CVE-2026-40011: güvenlik açığı

Açıklama (NVD)

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

Özet bilgiler

CVSS v3.1

3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

%0,23 (yüzdelik 13)

CWE

CWE-116

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.dnsdist.org
• CWE-116