Hpe Nonstop Dns 9 2 3 Non Secure Version
Monthly
Denial of service in HPE NonStop DNS 9.2.3 (Non Secure Version) lets an unauthenticated remote attacker disrupt the DNS service on affected NonStop systems by supplying crafted input that the service misinterprets. The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H (base 8.2) confirms network reachability, low attack complexity, no authentication and no user interaction, with a high availability impact, minor integrity impact and no confidentiality impact. Exposure is narrow - only HPE NonStop installations running this specific 'Non Secure Version' DNS component are affected, and reachability of the DNS listener determines real-world risk; no public exploit code identified at time of analysis and no confirmed active exploitation.
Denial of service in HPE NonStop DNS 9.2.3 (Non Secure Version) lets an unauthenticated remote attacker disrupt the DNS service on affected NonStop systems by supplying crafted input that the service misinterprets. The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H (base 8.2) confirms network reachability, low attack complexity, no authentication and no user interaction, with a high availability impact, minor integrity impact and no confidentiality impact. Exposure is narrow - only HPE NonStop installations running this specific 'Non Secure Version' DNS component are affected, and reachability of the DNS listener determines real-world risk; no public exploit code identified at time of analysis and no confirmed active exploitation.