CVE-2026-62309

概要

参考情報

• coredns/coredns commit 60a439d · Patch
• coredns/coredns#8154 · Issue Tracking
• coredns/coredns release v1.14.4 · Release Notes
• coredns/coredns security advisory · Exploit

coredns のその他の脆弱性

• CVE-2026-62994低 3.7CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreDNS zone can trigger …
• CVE-2026-62299中 5.3CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag…
• CVE-2026-35579緊急 9.8CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly hand…
• CVE-2026-33489高 7.5CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a pa…
• CVE-2026-33190高 7.5CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, …