CVE-2023-30464

2024-09-1800:00:00

mitre

github.com

coredns

dns cache poisoning

birthday attack

AI Score

7.1

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:coredns.io:coredns:*:*:*:*:*:*:*:*"
    ],
    "vendor": "coredns.io",
    "product": "coredns",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "1.10.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]