The vulnerability of the Coredns DNS server, related to information disclosure through caching, allows attackers to perform spoofing attacks.

🗓️ 16 Jan 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

CoreDNS DNS server vulnerability exposes information via caching, enabling remote spoofing attacks.

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is susceptible to multiple authentication related vulnerabilities due to coreDNS (CVE-2022-2837, CVE-2022-2835, CVE-2024-0874).	28 Jan 202522:08	–	ibm
Tenable Nessus	Azure Linux 3.0 Security Update: coredns (CVE-2024-0874)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: coredns (CVE-2024-0874)	3 Jul 202400:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : coredns (openSUSE-SU-2024:0319-1)	28 Sep 202400:00	–	nessus
Tenable Nessus	TencentOS Server 4: coredns (TSSA-2024:0812)	16 Jun 202500:00	–	nessus
CBLMariner	CVE-2024-0874 affecting package coredns for versions less than 1.11.1-2	22 Jul 202415:42	–	cbl_mariner
CBLMariner	CVE-2024-0874 affecting package coredns for versions less than 1.11.1-8	12 Jun 202422:23	–	cbl_mariner
Chainguard	CVE-2022-2835 vulnerabilities	3 Mar 202316:15	–	cgr
Chainguard	CVE-2022-2837 vulnerabilities	3 Mar 202316:15	–	cgr
Chainguard	CVE-2024-0874 vulnerabilities	25 Apr 202417:15	–	cgr

Vulners

Node

red_hat red_hat_advanced_cluster_management_for_kubernetesMatch2

OR

red_hat red_hat_openshift_container_platformMatch4.13

OR

red_hat red_hat_openshift_container_platformMatch4.15

OR

red_hat red_hat_openshift_container_platformMatch4.14

OR

red_hat red_hat_openshift_container_platformMatch4.16

OR

ibm storage_protect_serverRange8.1.0.000–8.1.25

Source	Link
redos	www.redos.red-soft.ru/support/secure/
github	www.github.com/advisories/GHSA-m9w6-wp3h-vq8g
github	www.github.com/coredns/coredns/issues/6186
github	www.github.com/coredns/coredns/pull/6354
ibm	www.ibm.com/support/pages/security-bulletin-ibm-storage-protect-server-susceptible-multiple-authentication-related-vulnerabilities-due-coredns-cve-2022-2837-cve-2022-2835-cve-2024-0874
access	www.access.redhat.com/security/cve/cve-2024-0874
web	www.web.nvd.nist.gov/view/vuln/detail

16 Jan 2025 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

CVSS 35.3

EPSS0.0076

CoreDNS information disclosure caching vulnerability spoofing attacks remote exploitation