CVE-2023-30464

Go/github.com/coredns/coredns CVE-2023-30464: low 3.7

CoreDNS Cache Poisoning via a birthday attack

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-h92q-fgpp-qhrq
• https://nvd.nist.gov/vuln/detail/CVE-2023-30464
• https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573
• https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
• https://github.com/coredns/coredns

CVE-2023-30464 · published 2024-09-18T21:30:48Z · modified 2026-09-10T03:50:18.186735635Z · JSON

Go/github.com/coredns/coredns CVE-2023-30464: unknown

CoreDNS Cache Poisoning via a birthday attack in github.com/coredns/coredns

Action: Upgrade github.com/coredns/coredns to 1.11.0 or later.

go get github.com/coredns/coredns@v1.11.0

Affected

Fixed versions

Sources

• osv: GO-2024-3134
• https://github.com/advisories/GHSA-h92q-fgpp-qhrq
• https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573
• https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba

CVE-2023-30464 · published 2024-09-25T17:43:58Z · modified 2026-02-04T04:26:57.501234Z · JSON