Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/28 10:54 p.m.10 views

CoreDNS has TSIG authentication bypass on gRPC and QUIC transports

Summary The gRPC, QUIC, DoH, and DoH3 transports in CoreDNS incorrectly handle TSIG authentication. For gRPC and QUIC, CoreDNS checks whether the TSIG key name exists in the config, but does not actually verify the TSIG HMAC. If the key name matches, tsigStatus remains nil and the tsig plugin...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder