AIKIDO-2026-585858

TL;DR

A client UDP connection that receives an unparseable datagram while awaiting a response stops listening and returns an error instead of ignoring the bad datagram. Because only the source port must be guessed, not the transaction ID, a spoofed malformed datagram can terminate a pending query. This is the denial-of-service variant of the TuDoor attack. The fix ignores malformed datagrams and keeps listening.