CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.7. It affects Exchange. It may lead to a denial-of-service condition.
CVE
CVE-2025-30187
Severity
LOW
CVSS
3.7
EPSS
0.27%
Exchange
Original NVD Description
In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries, an attacker might be able to cause a denial of service by crafting a DoH exchange that triggers an unbounded I/O read loop, causing an unexpected consumption of CPU resources.