Go/github.com/coredns/coredns CVE-2023-30464: low 3.7, EPSS 0.41%
CoreDNS Cache Poisoning via a birthday attack
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.10.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-h92q-fgpp-qhrq
- https://nvd.nist.gov/vuln/detail/CVE-2023-30464
- https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573
- https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
- https://github.com/coredns/coredns
CVE-2023-30464 · published · modified · JSON