coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-2837 · ADVISORY
• bugzilla.redhat.com/show_bug.cgi · WEB
• coredns/coredns · PACKAGE

Lỗ hổng khác của github.com/coredns/coredns

• CVE-2026-86003CAO 7.5CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in p…
• CVE-2026-82399CAO 7.5CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths …
• CVE-2026-62994THẤP 3.7CoreDNS is a DNS server written in Go. From 1.9.4 until 1.14.5, a network DNS client allowed to request AXFR for a CoreDNS zone can trigger …
• CVE-2026-35579NGHIÊM TRỌNG 9.8CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly hand…
• CVE-2026-33489CAO 7.5CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a pa…