GitHub Advisoryadvisory · Go
GHSA-m9w6-wp3h-vq8g CoreDNS may return invalid cache entries
MEDIUM
Official page ↗
- Aliases
- CVE-2024-0874
- Ecosystem
- Go
- Packages
- github.com/coredns/coredns
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-524
- Reviewed
- 2024-04-25
Affected packages
• Go github.com/coredns/coredns: < 1.11.2 → fixed in 1.11.2
Description
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.
Related
Alias · CVE (1)
- CVE-2024-0874 A flaw was found in coredns. vulnerability
Weakness · CWE (1)
- CWE-524 Use of Cache Containing Sensitive Information weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-0874 advisory
- https://github.com/coredns/coredns/issues/6186 web
- https://github.com/coredns/coredns/pull/6354 web
- https://github.com/coredns/coredns/commit/997c7f953962d47c242273f0e41398fdfb5b0151 web
- https://access.redhat.com/errata/RHSA-2024:0041 web
- https://access.redhat.com/errata/RHSA-2024:4850 web
- https://access.redhat.com/errata/RHSA-2024:6009 web
- https://access.redhat.com/errata/RHSA-2024:6406 web
- https://access.redhat.com/security/cve/CVE-2024-0874 web
- https://bugzilla.redhat.com/show_bug.cgi?id=2219234 web
- https://github.com/coredns/coredns package