500 matches found
cve-test-coredns-fork
이 저장소에는 README가 없습니다...
CVE-2026-62994
A flaw was found in CoreDNS, a DNS server. A remote attacker can trigger a denial of service by sending a specially crafted AXFR request to a CoreDNS zone. This occurs when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint...
CVE-2026-62299
A flaw was found in CoreDNS, a DNS server. A remote, unauthenticated client can exploit this vulnerability by sending a specially crafted DNS query that triggers a null pointer dereference in the rewrite plugin's EDNS0 response handling. This can lead to a denial of service DoS where the CoreDNS...
CVE-2026-62309
A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service DoS. The vulnerability arises from improper...
openSUSE 16 Security Update : coredns (openSUSE-SU-2026:21674-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21674-1 advisory. Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes...
Security update for coredns (moderate)
openSUSE security update: security update for coredns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21674-1 Rating: moderate References: bsc1276712 Cross-References: CVE-2026-41178 CVSS scores: CVE-2026-41178 SUSE : 5.3...
OPENSUSE-SU-2026:21674-1 Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes stale-cache races, AXFR zone contamination, DoH health-check TLS config, failover counter reset,...
OPENSUSE-SU-2026:11608-1 coredns-1.14.7-1.1 on GA media
These are all security issues fixed in the coredns-1.14.7-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2025-4233 vulnerabilities
Vulnerabilities for packages: spegel, ipfs-cluster-fips, eks-distro, seaweedfs-fips, caddy-fips, rke2-runtime, kubo-fips, caddy, coredns, traefik-fips, dkron, k8sgateway, kargo, ipfs-cluster, q, syncthing, eks-distro-fips, frp, spegel-fips, kubo, dkron-fips, k3s, seaweedfs, buf, syncthing-fips,...
GO-2026-4867 vulnerabilities
Vulnerabilities for packages: redka, knative-operator, knative-serving, gatekeeper, blobfuse2, dgraph, rke2-runtime-fips, kubeflow-katib, boringssl-fips-static, azuredisk-csi-fips, envoy-gateway, crossplane-function-environment-configs, prometheus-operator, knative-kafka-broker,...
GO-2026-4394 vulnerabilities
Vulnerabilities for packages: cluster-api-azure-controller-fips, falcosidekick-fips, skaffold, jobset-fips, livekit-server-fips, temporal-server-fips, terraform-provider-grafana-fips, terragrunt, envoy-gateway, docker-fips, steampipe, kubescape, cortex-fips, kapp-controller-fips, src,...
GO-2026-4868 vulnerabilities
Vulnerabilities for packages: redka, knative-operator, knative-serving, gatekeeper, blobfuse2, dgraph, rke2-runtime-fips, kubeflow-katib, boringssl-fips-static, azuredisk-csi-fips, envoy-gateway, crossplane-function-environment-configs, prometheus-operator, knative-kafka-broker,...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: prometheus-pushgateway-fips, knative-operator, cluster-api-azure-controller-fips, opentelemetry-collector-contrib, jobset-fips, temporal-server-fips, terraform-provider-grafana-fips, terragrunt, secrets-store-csi-driver-fips, dcgm-exporter-fips, influxd,...
GO-2026-4864 vulnerabilities
Vulnerabilities for packages: redka, knative-operator, knative-serving, gatekeeper, newrelic-fluent-bit-output, rke2-runtime-fips, azuredisk-csi-fips, aws-flb-cloudwatch, kots, prometheus-operator, kubernetes-csi-node-driver-registrar, qemu-guesthelper, cluster-autoscaler, kubescape, spire-server...
GO-2026-4986 vulnerabilities
Vulnerabilities for packages: cluster-api-azure-controller-fips, gotrue-fips, jobset-fips, terraform-provider-grafana-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-azure-netapp, aws-flb-cloudwatch, crossplane-provider-aws-cloudwatch, prometheus-operator, skopeo,...
GO-2026-4981 vulnerabilities
Vulnerabilities for packages: cluster-api-azure-controller-fips, falcosidekick-fips, gotrue-fips, jobset-fips, livekit-server-fips, temporal-server-fips, terraform-provider-grafana-fips, crossplane-provider-aws-mediapackage-fips, crossplane-provider-azure-netapp, aws-flb-cloudwatch,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, cluster-api-azure-controller-fips, falcosidekick-fips, perses-fips, gotrue-fips, ytt-fips, jobset-fips, livekit-server-fips, temporal-server-fips, terraform-provider-grafana-fips,...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: redka, ferretdb, gatekeeper, newrelic-fluent-bit-output, kubo-fips, headlamp-fips, kubeflow-katib, xeol, aws-flb-cloudwatch, steampipe, qemu-guesthelper, vale, cosign, spire-server, redis-operator-fips, terraform-provider-pagerduty, flux-kustomize-controller,...
GO-2026-4341 vulnerabilities
Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, falcosidekick-fips, knative-operator, gptscript, temporal-server-fips, aws-flb-cloudwatch, influxd, longhorn-cli-fips, crossplane-provider-family-aws, steampipe, rancher-system-upgrade-controller, vale,...