CVE-2026-40209 — Denial of service via IXFR queries
An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This co…
Published: 2026-06-25 · CVSS: 5.3 · CVSS 3.1
An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7