500 matches found
cve-test-coredns-fork
This repository does not have a README...
CVE-2026-62994
A flaw was found in CoreDNS, a DNS server. A remote attacker can trigger a denial of service by sending a specially crafted AXFR request to a CoreDNS zone. This occurs when CoreDNS is configured with k8sexternal headless-service zone transfers and Kubernetes contains a headless service endpoint...
CVE-2026-62299
A flaw was found in CoreDNS, a DNS server. A remote, unauthenticated client can exploit this vulnerability by sending a specially crafted DNS query that triggers a null pointer dereference in the rewrite plugin's EDNS0 response handling. This can lead to a denial of service DoS where the CoreDNS...
CVE-2026-62309
A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service DoS. The vulnerability arises from improper...
openSUSE 16 Security Update : coredns (openSUSE-SU-2026:21674-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21674-1 advisory. Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes...
Security update for coredns (moderate)
openSUSE security update: security update for coredns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21674-1 Rating: moderate References: bsc1276712 Cross-References: CVE-2026-41178 CVSS scores: CVE-2026-41178 SUSE : 5.3...
OPENSUSE-SU-2026:21674-1 Security update for coredns
This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes stale-cache races, AXFR zone contamination, DoH health-check TLS config, failover counter reset,...
OPENSUSE-SU-2026:11608-1 coredns-1.14.7-1.1 on GA media
These are all security issues fixed in the coredns-1.14.7-1.1 package on the GA media of openSUSE Tumbleweed...
GO-2025-4233 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, kubernetes-dns-node-cache-fips, k8sgateway-fips, coredns, buf, syncthing, spegel-fips, seaweedfs, caddy, kubernetes-dns-node-cache, rke2-runtime, dkron, dkron-fips, spegel, traefik-fips, ipfs-cluster, k8sgateway, syncthing-fips, eks-distro, teleport,...
GO-2026-4867 vulnerabilities
Vulnerabilities for packages: calico-fips, flux-fips, spilo, kubescape-server, argo-cd-fips, boringssl-fips-static, newrelic-nri-statsd, secrets-store-csi-driver-provider-azure, buf, cilium-fips, buildkite-agent-fips, blobfuse2-fips, apache-beam-java-sdk, helm-fips, knative-eventing, gitaly-fips,...
GO-2026-4394 vulnerabilities
Vulnerabilities for packages: calico-fips, syft, kubernetes-dns-node-cache-fips, kubescape-server, fluent-operator-fips, policy-controller-fips, percona-server-mongodb-operator-fips, gcsfuse, kyverno-notation-aws-fips, buildkitd-fips, harbor, cloud-provider-aws, cluster-api-azure-controller-fips,...
GO-2026-4868 vulnerabilities
Vulnerabilities for packages: calico-fips, flux-fips, spilo, kubescape-server, argo-cd-fips, boringssl-fips-static, newrelic-nri-statsd, secrets-store-csi-driver-provider-azure, buf, cilium-fips, buildkite-agent-fips, blobfuse2-fips, apache-beam-java-sdk, helm-fips, knative-eventing, gitaly-fips,...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: dask-gateway, openbao-fips, syft, kubescape-server, kots, policy-controller-fips, secrets-store-csi-driver-provider-azure, flux-image-reflector-controller-fips, apache-beam-java-sdk, skopeo, dcgm-exporter-fips, crossplane-function-auto-ready-fips,...
GO-2026-4864 vulnerabilities
Vulnerabilities for packages: dask-gateway, flux-fips, kots, argo-cd-fips, elastic-agent, kine, cilium-fips, knative-eventing, buildkite-agent-fips, fscrypt, gitaly-fips, docker-cli-fips, k9s-fips, istio, harbor, cloud-provider-aws, coredns-fips, aws-flb-firehose-fips, cluster-autoscaler-fips,...
GO-2026-4986 vulnerabilities
Vulnerabilities for packages: dask-gateway, openbao-fips, kots, policy-controller-fips, skopeo, kyverno-notation-aws-fips, crossplane-provider-aws-emr, harbor, cluster-api-azure-controller-fips, coder-fips, crossplane-provider-aws-elbv2, crossplane-provider-aws-memorydb-fips, grafana, istio-fips,...
GO-2026-4984 vulnerabilities
Vulnerabilities for packages: calico-fips, dask-gateway, amazon-k8s-cni, openbao-fips, kubernetes-dns-node-cache-fips, kots, minify, fluent-operator-fips, policy-controller-fips, victoriametrics-cluster, kubeflow-fips, flux-image-reflector-controller-fips, secrets-store-csi-driver-provider-azure,...
GO-2026-4981 vulnerabilities
Vulnerabilities for packages: dask-gateway, openbao-fips, kubernetes-dns-node-cache-fips, kots, policy-controller-fips, secrets-store-csi-driver-provider-azure, flux-image-reflector-controller-fips, percona-server-mongodb-operator-fips, skopeo, dcgm-exporter-fips,...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: dask-gateway, flux-fips, kubernetes-dns-node-cache-fips, argo-cd-fips, argo-rollouts-fips, elastic-agent, kine, terraform-provider-pagerduty, conftest, k9s-fips, scorecard, flux-source-controller-fips, goreleaser, packer, coredns-fips, k8sgateway, syncthing-fips,...
GO-2026-4341 vulnerabilities
Vulnerabilities for packages: calico-fips, dask-gateway, lazygit, kubernetes-dns-node-cache-fips, policy-controller-fips, kubeflow-fips, percona-server-mongodb-operator-fips, nri-postgresql-fips, authservice, influx, cloud-provider-aws, cert-manager-google-cas-issuer, postgres-operator-fips,...