CoreDNS: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2023-28452

  CoreDNS vulnerable to TuDoor Attacks

  An issue was discovered in CoreDNS through 1.10.1. There is a vulnerability in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing denial of service for normal resolution. In an exploit, the attacker could just forge a re…

  juicefs-1.3 juicefs-1.3-compat github.com/coredns/coredns Wolfi Go
  Sep 18, 2024
• High 7.5
  CVE-2023-30464

  CoreDNS Cache Poisoning via a birthday attack

  CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.

  juicefs-1.3 juicefs-1.3-compat github.com/coredns/coredns Wolfi Go
  Sep 18, 2024

Revision history

1. 2024-09-29 #3

   Neue Updates von openSUSE aufgenommen

2. 2024-09-19 #2

   Anpassung im Text

3. 2024-09-18 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2024-09-18
  https://github.com/advisories/GHSA-hfmw-7g3m-gj6q
• GitHub Advisory Database vom 2024-09-18
  https://github.com/advisories/GHSA-h92q-fgpp-qhrq
• openSUSE Security Update OPENSUSE-SU-2024:0319-1 vom 2024-09-27
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2JLUFKCHWHJJ2MQ6XRREF7D4OOWB23V2/