CoreDNS: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.7
  CVE-2026-26017

  CoreDNS ACL Bypass

  CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the default execution order of plugins. Security plugins such as acl are evaluated before the rewrite plu…

  coredns coredns juicefs-1.3 kubernetes-dns-node-cache Azure Linux Wolfi Go
  Mar 6, 2026
• High 7.5
  CVE-2026-26018

  CoreDNS Loop Detection Denial of Service Vulnerability

  CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in CoreDNS's loop detection plugin that allows an attacker to crash the DNS server by sending specially crafted DNS queries. The vulnerability stems…

  coredns coredns kubernetes-dns-node-cache coredns-1.13 Azure Linux Wolfi Go
  Mar 6, 2026

Revision history

1. 2026-07-08 #7

   Neue Updates von Red Hat aufgenommen

2. 2026-06-10 #6

   Neue Updates von Red Hat aufgenommen

3. 2026-04-26 #5

   Neue Updates von openSUSE aufgenommen

4. 2026-03-11 #4

   Neue Updates von openSUSE aufgenommen

5. 2026-03-10 #3

   Neue Updates aufgenommen

6. 2026-03-08 #2

   Neue Updates von openSUSE und European Union Vulnerability Database aufgenommen

7. 2026-03-05 #1

   Initiale Fassung

References

• CoreDNS GitHub vom 2026-03-05
  https://github.com/coredns/coredns/security/advisories/GHSA-c9v3-4pv7-87pr
• CoreDNS GitHub vom 2026-03-05
  https://github.com/coredns/coredns/security/advisories/GHSA-h75p-j8xm-m278
• openSUSE Security Update OPENSUSE-SU-2026:10297-1 vom 2026-03-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XTKYCU7PQZZIHLVJXWGEMRKJRO3UY3UT/
• Microsoft Leitfaden für Sicherheitsupdates vom 2026-03-10
  https://msrc.microsoft.com/update-guide/
• openSUSE Security Update OPENSUSE-SU-2026:0079-1 vom 2026-03-11
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AHRCSJENZA3STN62UKMLBRZ4QP3KV22D/
• openSUSE Security Update OPENSUSE-SU-2026:0080-1 vom 2026-03-11
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DPID4P33S2DUNWVEUQAOMM2IL347ZUIU/
• openSUSE Security Update OPENSUSE-SU-2026:20619-1 vom 2026-04-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XUWFAM7PG7C5B2EEMQCBNZCSTIRS4EOJ/
• Red Hat Security Advisory RHSA-2026:25127 vom 2026-06-11
  https://access.redhat.com/errata/RHSA-2026:25127
• Red Hat Security Advisory RHSA-2026:36873 vom 2026-07-09
  https://access.redhat.com/errata/RHSA-2026:36873