EUVD-2023-12373

Malicious code in bioql PyPI...

EUVD-2022-1226

Malicious code in bioql PyPI...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar-fips, rancher-machine, cloud-provider-aws, prometheus-adapter, yace-fips, memcached-exporter-fips, gitsign, secrets-store-csi-driver-provider-aws-fips, azuredisk-csi-fips, git-lfs, grafana-operator, mattmoor-chainit,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar-fips, rancher-machine, cloud-provider-aws, prometheus-adapter, yace-fips, memcached-exporter-fips, gitsign, secrets-store-csi-driver-provider-aws-fips, azuredisk-csi-fips, git-lfs, grafana-operator, mattmoor-chainit,...

GO-2025-3942 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns

CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns...

SUSE CVE-2025-58063

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...

AZL-67101 CVE-2025-58063 affecting package coredns for versions less than 1.11.1-22

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...

AZL-67097 CVE-2025-58063 affecting package coredns for versions less than 1.11.4-10

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...

Incorrect Conversion between Numeric Types

Overview Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types via the TTL function, which casts the 64-bit etcd lease ID to a uint32 and uses it as the TTL. An attacker can cause prolonged caching of DNS records and disrupt DNS resolution by supplying lar...

CVE-2025-58063 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...

CVE-2025-58063

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...

CVE-2025-58063 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...

PT-2025-36935

Name of the Vulnerable Software and Affected Versions: CoreDNS versions 1.2.0 through 1.12.3 Description: CoreDNS, a DNS server that chains plugins, contains a TTL confusion vulnerability within the etcd plugin. This flaw arises from the incorrect use of lease IDs as TTL values, potentially...

CoreDNS 安全漏洞

CoreDNS is a DNS server for the CoreDNS community. A security vulnerability exists in CoreDNS versions prior to 1.2.0 through 1.12.4, which stems from a TTL obfuscation of the etcd plugin, and could lead to a DNS cache fixation attack and denial of service...

Linux Distros Unpatched Vulnerability : CVE-2018-16886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control RBAC is used and...

Linux Distros Unpatched Vulnerability : CVE-2020-15106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file a...

TencentOS Server 4: etcd (TSSA-2024:0821)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0821 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2023-28114

cilium-cli is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,cilium-cli, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the etcd store used to mirror local cluster...

CVE-2023-46307

An issue was discovered in server.js in etcd-browser 87ae63d75260. By supplying a /../../../ Directory Traversal input to the URL's GET request while connecting to the remote server port specified during setup, an attacker can retrieve local operating system files from the remote system...

Photon OS 3.0: Etcd PHSA-2023-3.0-0586

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0586. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...