1064 matches found
EUVD-2022-7121
Malicious code in bioql PyPI...
EUVD-2023-0749
Malicious code in bioql PyPI...
EUVD-2022-1226
Malicious code in bioql PyPI...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: kserve-rest-proxy, ctop, prometheus-adapter, knative-serving, wazero-fips, node-problem-detector-fips, prometheus-process-exporter, prometheus-nats-exporter, etcd-fips, kubeflow-katib, apm-server-fips, terraform-provider-time, kube-vip, sftpgo-plugin-pubsub, dagdotde...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: kserve-rest-proxy, ctop, prometheus-adapter, knative-serving, wazero-fips, node-problem-detector-fips, prometheus-process-exporter, prometheus-nats-exporter, etcd-fips, kubeflow-katib, apm-server-fips, terraform-provider-time, kube-vip, sftpgo-plugin-pubsub, dagdotde...
GO-2025-3942 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns
CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion in github.com/coredns/coredns...
SUSE CVE-2025-58063
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
AZL-67097 CVE-2025-58063 affecting package coredns for versions less than 1.11.4-10
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
AZL-67101 CVE-2025-58063 affecting package coredns for versions less than 1.11.1-22
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
Incorrect Conversion between Numeric Types
Overview Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types via the TTL function, which casts the 64-bit etcd lease ID to a uint32 and uses it as the TTL. An attacker can cause prolonged caching of DNS records and disrupt DNS resolution by supplying lar...
CVE-2025-58063
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
CVE-2025-58063 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
CVE-2025-58063
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
CVE-2025-58063 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
PT-2025-36935
Name of the Vulnerable Software and Affected Versions: CoreDNS versions 1.2.0 through 1.12.3 Description: CoreDNS, a DNS server that chains plugins, contains a TTL confusion vulnerability within the etcd plugin. This flaw arises from the incorrect use of lease IDs as TTL values, potentially...
CVE-2025-58063: Incorrect Conversion between Numeric Types
CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for D...
CoreDNS 安全漏洞
CoreDNS is a DNS server for the CoreDNS community. A security vulnerability exists in CoreDNS versions prior to 1.2.0 through 1.12.4, which stems from a TTL obfuscation of the etcd plugin, and could lead to a DNS cache fixation attack and denial of service...
Linux Distros Unpatched Vulnerability : CVE-2018-16886
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control RBAC is used and...
Linux Distros Unpatched Vulnerability : CVE-2020-15106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file a...
baosnetlib-python (0.1.0), etcd-apiv3 (2.3.0.1) +2 more potentially affected by CVE-2025-4565 via protobuf (2.6.1)
protobuf PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - baosnetlib-python 0.1.0 - etcd-apiv3 2.3.0.1 - kaircs 0.4.0 - labeless =1.1.2.48, =1.1.6.0 Source cves: CVE-2025-4565 Source advisory:...