tocsin

CVE-2025-68151

2 advisories.

Go/github.com/coredns/coredns CVE-2025-68151: medium, EPSS 0.49%

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

Action: Upgrade github.com/coredns/coredns to 1.14.0 or later.

go get github.com/coredns/coredns@v1.14.0

Affected

introducedfixedlast affected
01.14.0-

Fixed versions

1.14.0

Sources

CVE-2025-68151 · published · modified · JSON

Go/github.com/coredns/coredns CVE-2025-68151: unknown, EPSS 0.49%

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages in github.com/coredns/coredns

Action: Upgrade github.com/coredns/coredns to 1.14.0 or later.

go get github.com/coredns/coredns@v1.14.0

Affected

introducedfixedlast affected
01.14.0-

Fixed versions

1.14.0

Sources

CVE-2025-68151 · published · modified · JSON