A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version can trigger a denial of service. The flaw allows an attacker to craft inputs that crash or exhaust the DNS service, resulting in a loss of availability for clients relying on the server. The weakness aligns with CWE-115, which involves improper handling of untrusted input, indicating that unsolicited requests may cause the server to fail unexpectedly. In a typical scenario, the attacker would send malicious DNS queries over the network to exploit the flaw, leading to a temporary or sustained outage that could disrupt network operations.

The vulnerability affects Hewlett Packard Enterprise’s HPE NonStop DNS 9.2.3 Non Secure Version. No additional affected versions are listed; therefore, systems running this exact version should be considered at risk.

The CVSS score of 8.2 marks this flaw as high severity, reflecting a significant impact on availability. The EPSS score is not available, so the likelihood of exploitation cannot be precisely quantified, but the lack of a KEV listing suggests no widespread, known exploitation yet. The likely attack vector is network-based; an external attacker can target the DNS service from the internet or a compromised internal host. Given the nature of denial-of-service attacks, the ability to disrupt services can be leveraged as part of a broader adversarial campaign.