1 matches found
CoreDNS has TSIG authentication bypass on gRPC and QUIC transports
Summary The gRPC, QUIC, DoH, and DoH3 transports in CoreDNS incorrectly handle TSIG authentication. For gRPC and QUIC, CoreDNS checks whether the TSIG key name exists in the config, but does not actually verify the TSIG HMAC. If the key name matches, tsigStatus remains nil and the tsig plugin...
9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References4Affected Software1
20