Go/github.com/coredns/coredns CVE-2023-30464: unknown, EPSS 0.41%
CoreDNS Cache Poisoning via a birthday attack in github.com/coredns/coredns
Action: Upgrade github.com/coredns/coredns to 1.11.0 or later.
go get github.com/coredns/coredns@v1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: GO-2024-3134
- https://github.com/advisories/GHSA-h92q-fgpp-qhrq
- https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573
- https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
CVE-2023-30464 · published · modified · JSON