CVE-2025-8696: DoS Flaw in Stork UI Allows Unauthenticated Attackers to Crash Servers

The CVE-2025-8696 vulnerability in Stork UI, a tool for monitoring and managing ISC DHCP and BIND installations, has been described as a high-severity DoS risk that could be exploited by unauthenticated attackers to crash affected servers. The advisory notes that sending a large amount of data to the Stork UI can cause memory and disk use problems for the system running the Stork server, due to improper handling of excessive input.

According to ISC, “If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server.” The flaw affects Stork versions 1.0.0 through 2.3.0, and patches are available in versions 2.2.1 and 2.3.1, which administrators are urged to deploy to mitigate the risk.

In environments where immediate patching isn’t possible, ISC recommends placing the Stork server behind a firewall or proxy that limits input size and only allows access from trusted clients.