500 matches found
cve-test-coredns-fork
이 저장소에는 README가 없습니다...
CVE-2026-62994
A flaw was found in CoreDNS, a DNS server. A remote attacker can trigger a denial of service by sending a specially crafted AXFR request to a CoreDNS zone. This occurs when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint...
CVE-2026-62299
A flaw was found in CoreDNS, a DNS server. A remote, unauthenticated client can exploit this vulnerability by sending a specially crafted DNS query that triggers a null pointer dereference in the rewrite plugin's EDNS0 response handling. This can lead to a denial of service DoS where the CoreDNS...
CVE-2026-62309
A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service DoS. The vulnerability arises from improper...
openSUSE 16 Security Update : coredns (openSUSE-SU-2026:21674-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21674-1 advisory. Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes...
Security update for coredns (moderate)
openSUSE security update: security update for coredns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21674-1 Rating: moderate References: bsc1276712 Cross-References: CVE-2026-41178 CVSS scores: CVE-2026-41178 SUSE : 5.3...
OPENSUSE-SU-2026:21674-1 Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes stale-cache races, AXFR zone contamination, DoH health-check TLS config, failover counter reset,...
OPENSUSE-SU-2026:11608-1 coredns-1.14.7-1.1 on GA media
These are all security issues fixed in the coredns-1.14.7-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2025-4233 vulnerabilities
Vulnerabilities for packages: k3s, kubo-fips, seaweedfs-fips, traefik, spegel-fips, k8sgateway-fips, q, rke2-runtime, kubo, ipfs-cluster, kargo, spegel, syncthing, frp, k8sgateway, syncthing-fips, teleport, ipfs-cluster-fips, caddy, eks-distro-fips, kubernetes-dns-node-cache-fips, traefik-fips,...
GO-2026-4867 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, zabbix-agent2-fips, traefik, nri-mssql, longhorn-engine, mage, percona-server-mongodb-operator, istio-fips, secrets-store-csi-driver-provider-azure, rke2-runtime, kubernetes-csi-node-driver-registrar-fips, prometheus, loki, karpenter-fips,...
GO-2026-4394 vulnerabilities
Vulnerabilities for packages: kubescape, trillian-fips, gogatekeeper, longhorn-manager-fips, rke2-runtime, keda, task, octo-sts, kine, gcp-compute-persistent-disk-csi-driver-fips, kiali, grafana, steampipe, gitlab-operator, datadog-operator-fips, metrics-server-fips, otel-cli, gitlab-workhorse-ce...
GO-2026-4868 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, zabbix-agent2-fips, traefik, nri-mssql, longhorn-engine, mage, percona-server-mongodb-operator, istio-fips, secrets-store-csi-driver-provider-azure, rke2-runtime, kubernetes-csi-node-driver-registrar-fips, prometheus, loki, karpenter-fips,...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-kubernetes, kubescape, hubble-ui-backend-fips, trillian-fips, gogatekeeper, longhorn-manager-fips, longhorn-engine, crossplane-provider-family-aws-fips, secrets-store-csi-driver-provider-azure, rke2-runtime, keda,...
GO-2026-4864 vulnerabilities
Vulnerabilities for packages: kubescape, newrelic-fluent-bit-output-fips, traefik, kubernetes-dashboard, kaf, istio-fips, rke2-runtime, keda, kubernetes-csi-node-driver-registrar-fips, libnvidia-container-fips, kine, prometheus, loki, karpenter-fips, gitaly, terraform, gosu, buildkite-agent-fips,...
GO-2026-4986 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-macie2-fips, timestamp-authority, hubble-ui-backend-fips, crossplane-provider-aws-kafkaconnect, longhorn-manager-fips, crossplane-provider-family-aws-fips, seaweedfs-rocksdb, rke2-runtime, keda, kubernetes-csi-node-driver-registrar-fips,...
GO-2026-4981 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, crossplane-provider-aws-macie2-fips, generic-device-plugin-fips, zabbix-agent2-fips, ocm-cli-fips, hubble-ui-backend-fips, trillian-fips, trivy-k8s-wrapper, crossplane-provider-aws-kafkaconnect, longhorn-manager-fips,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, crossplane-provider-aws-macie2-fips, generic-device-plugin-fips, terraform-provider-grafana-fips, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ocm-cli-fips, zabbix-agent2-fips, hubble-ui-backend-fips, trillian-fip...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, kubo-fips, bento, newrelic-fluent-bit-output-fips, traefik, kubernetes-dashboard, rke2-runtime, kubo, kine, vale, prometheus, redis-operator-fips, loki, terraform, syncthing-fips, gosu, xeol, azure-aad-pod-identity-mic, cloudbeat-fips,...
GO-2026-4341 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, ytt, hubble-ui-backend-fips, trillian-fips, minc, gogatekeeper, chisel-fips, longhorn-engine, longhorn-manager-fips, crossplane-provider-family-aws-fips, dockerize-fips,...