500 matches found
cve-test-coredns-fork
Este repositorio no tiene un README...
CVE-2026-62994
A flaw was found in CoreDNS, a DNS server. A remote attacker can trigger a denial of service by sending a specially crafted AXFR request to a CoreDNS zone. This occurs when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint...
CVE-2026-62299
A flaw was found in CoreDNS, a DNS server. A remote, unauthenticated client can exploit this vulnerability by sending a specially crafted DNS query that triggers a null pointer dereference in the rewrite plugin's EDNS0 response handling. This can lead to a denial of service DoS where the CoreDNS...
CVE-2026-62309
A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service DoS. The vulnerability arises from improper...
openSUSE 16 Security Update : coredns (openSUSE-SU-2026:21674-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21674-1 advisory. Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes...
Security update for coredns (moderate)
openSUSE security update: security update for coredns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21674-1 Rating: moderate References: bsc1276712 Cross-References: CVE-2026-41178 CVSS scores: CVE-2026-41178 SUSE : 5.3...
OPENSUSE-SU-2026:21674-1 Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes stale-cache races, AXFR zone contamination, DoH health-check TLS config, failover counter reset,...
OPENSUSE-SU-2026:11608-1 coredns-1.14.7-1.1 on GA media
These are all security issues fixed in the coredns-1.14.7-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2025-4233 vulnerabilities
Vulnerabilities for packages: traefik-fips, spegel-fips, kubo-fips, kubo, dkron, eks-distro-fips, frp, k3s, caddy, seaweedfs-fips, syncthing-fips, buf, ipfs-cluster, kargo, traefik, caddy-fips, q, coredns, eks-distro, k8sgateway-fips, kubernetes-dns-node-cache, seaweedfs, spegel, rke2-runtime,...
GO-2026-4867 vulnerabilities
Vulnerabilities for packages: azurefile-csi-fips, tigera-operator, docker-cli-fips, traefik-fips, kubeflow-katib, quic-go-fips, buildkite-agent, gatekeeper, knative-eventing-fips, loki, opencost, helm-fips, cluster-api-fips, tigera-operator-fips, cephcsi, spire-server, blobfuse2, blobfuse2-fips,...
GO-2026-4394 vulnerabilities
Vulnerabilities for packages: cluster-api-provider-vsphere, terraform-provider-grafana, blob-csi-fips, ratify-fips, grafana, cluster-api-azure-controller-fips, kubevirt-cdi-operator, cloudbeat, aws-otel-collector-fips, argo-workflows-fips, terraform-fips, kubernetes-dns-node-cache-fips, trillian,...
GO-2026-4868 vulnerabilities
Vulnerabilities for packages: azurefile-csi-fips, tigera-operator, docker-cli-fips, traefik-fips, kubeflow-katib, quic-go-fips, buildkite-agent, gatekeeper, knative-eventing-fips, loki, opencost, helm-fips, cluster-api-fips, tigera-operator-fips, cephcsi, spire-server, blobfuse2, blobfuse2-fips,...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: tigera-operator, cluster-api-provider-vsphere, prometheus-blackbox-exporter, grafana-rollout-operator, falco-exporter-fips, knative-eventing-fips, blob-csi-fips, influxd, lvm-driver-fips, prometheus-mysqld-exporter, prometheus-pushgateway, terraform-provider-grafana,...
GO-2026-4864 vulnerabilities
Vulnerabilities for packages: azurefile-csi-fips, tigera-operator, docker-cli-fips, kube-state-metrics, traefik-fips, k8s-device-plugin, commercial-chainloop-cli, buildkite-agent, elastic-agent-fips, aws-flb-kinesis, gatekeeper, hubble, knative-eventing-fips, loki, spire-server, zitadel,...
GO-2026-4986 vulnerabilities
Vulnerabilities for packages: tigera-operator, knative-eventing-fips, grafana, cluster-api-azure-controller-fips, cloudbeat, falco-no-driver, nerdctl-fips, act, mapotf-fips, crossplane-provider-aws-chime, argo-workflows-fips, crossplane-provider-aws-athena, crossplane-provider-aws-scheduler,...
GO-2026-4981 vulnerabilities
Vulnerabilities for packages: tigera-operator, kserve-localmodelnode-agent-fips, prometheus-blackbox-exporter, falco-exporter-fips, knative-eventing-fips, blob-csi-fips, influxd, lvm-driver-fips, ratify-fips, certificate-transparency, grafana, cluster-api-azure-controller-fips, cloudbeat,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, scuttle-fips, nvidia-container-toolkit-fips, kserve-localmodelnode-agent-fips, prometheus-blackbox-exporter, sigstore-scaffolding-fips, kubernetes-ingress-defaultbackend-fips, neuvector-dbgen-fips, falco-exporter-fip...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: tigera-operator, kube-state-metrics, kubeflow-katib, kubo-fips, kubo, terraform-provider-pagerduty, elastic-agent-fips, gatekeeper, aws-flb-kinesis, loki, hubble, nvidia-nsight-compute-13.2, spire-server, zitadel, steampipe, syncthing-fips, cloudbeat, falco-no-driver...
GO-2026-4341 vulnerabilities
Vulnerabilities for packages: tigera-operator, mongodb-kubernetes-operator-fips, volcano, yace, prometheus-blackbox-exporter, grafana-rollout-operator, kubernetes-dashboard-metrics-scraper, falco-exporter-fips, knative-eventing-fips, blob-csi-fips, influxd, lvm-driver-fips,...