GHSA-9GM5-9RFH-M6VX CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP

Summary CoreDNS accepted RFC 2136 UPDATE messages over DoH, DoH3, DoQ, and DNS-over-gRPC, then allowed the proxy/forward plugin to send them unchanged to an upstream DNS server. UDP, TCP, and DoT rejected the same opcode before plugin dispatch. If an update-capable upstream trusts CoreDNS's sourc...

BIT-FLUENTD-2026-44160 Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's inhttp and inforward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as bodysizelimit and...

CVE-2026-44160 Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's inhttp and inforward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as bodysizelimit and...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the inhttp and inforward plugins when decompressing gzip-compressed data. An attacker can cause excessive memory consumption by sending a highly compressed payload that...

Fluent Bit in_forward Plugin Bypass

The vulnerability of the inforward plugin for logging and processing in Fluent Bit is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and gain access to the system...

openSUSE 15 Security Update : coredns (openSUSE-SU-2024:0319-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0319-1 advisory. Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forwar...

go-coredns:fuzz_plugin_forward: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6248035597549568 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzpluginforward Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f2ef560e108 Crash State: pthreadcreate cgotrypthreadcrea...

go-coredns:fuzz_plugin_forward: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4918143797821440 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzpluginforward Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

go-coredns:fuzz_plugin_forward: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6020075566530560 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzpluginforward Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000061e6a161 Crash State: NULL Sanitizer: address ASAN...

go-coredns:fuzz_plugin_forward: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6435220908277760 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzpluginforward Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000010b7e0f4 Crash State: NULL Sanitizer: address ASAN...

go-coredns:fuzz_plugin_forward: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5587307215323136 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzpluginforward Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000026e5fa1f Crash State: NULL Sanitizer: address ASAN...