Skip to content
OpenAdvisories
Medium WID-SEC-2026-1283 5 CVEs

CoreDNS: Mehrere Schwachstellen ermöglichen

Published Apr 26, 2026 · Updated Sep 21, 2026 · Revision 6 · de-DE

Vendor: Microsoft Vendor: Red Hat Vendor: SUSE Product: Azure Linux Product: Enterprise Linux Product: openSUSE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in CoreDNS ausnutzen, um Sicherheitsmaßnahmen zu umgehen und so vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Product

CoreDNS ist ein DNS server.

Vulnerabilities 5

  • High 8.7
    CVE-2026-32934

    CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service

    CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-QUIC (DoQ) server can be driven into unbounded goroutine and memory growth by a remote client that opens many QUIC streams and sends only 1 byte per stream. When the worker…

    coredns coredns juicefs-1.3 kubernetes-dns-node-cache Azure Linux Wolfi Go
  • High 8.7
    CVE-2026-32936

    CoreDNS DoH GET path missing size validation causes CPU and memory amplification

    CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter values and performs URL query parsing, base64 decoding, and DNS message unpacking before rejecting the request. …

    coredns coredns kubernetes-dns-node-cache juicefs-1.3 Azure Linux Wolfi Go
  • High 8.7
    CVE-2026-33190

    CoreDNS TSIG authentication bypass on encrypted DNS transports

    CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it trusts the transport writer's TsigStatus() instead of performing verification itse…

    coredns coredns kubernetes-dns-node-cache juicefs-1.3 Azure Linux Wolfi Go
  • High 8.2
    CVE-2026-33489

    CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison

    CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone are configured. The longestMatch() function in plugin/transfer/transfer.go uses a…

    coredns coredns juicefs-1.3 kubernetes-dns-node-cache Azure Linux Wolfi Go
  • High 8.2
    CVE-2026-35579

    CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports

    CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configuration but …

    coredns coredns juicefs-1.3 kubernetes-dns-node-cache Azure Linux Wolfi Go

Revision history

  1. #6

    Neue Updates von openSUSE aufgenommen

  2. #5

    Neue Updates aufgenommen

  3. #4

    Neue Updates von Red Hat aufgenommen

  4. #3

    Neue Updates aufgenommen

  5. #2

    Neue Updates von European Union Vulnerability Database und openSUSE aufgenommen

  6. #1

    Initiale Fassung

References