I looked on english.ncsc.nl's news section (it's the most recently published article) and it seems to be referencing OpenBSD's security page as the reason this "CVD" doesn't involve the developers and thus isn't really a CVD.

The link is over linelen characters long and it may have gotten truncated.

On 29 October 2021 17:52:09 UTC, Jean St-Laurent via NANOG <nanog@nanog.org> wrote:

The link doesn't work. 404

https://www.ncsc.nl/actueel/nieuws/2021/oktober/29/aanstaande-bekendm

What are the specs of that possible dos vuln? 

Is is reflection or amplification or something else?

Thanks
Jean

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.