Vulnerabilities in coredns
10 resultsCVE-2025-47950HIGHCoreDNS Vulnerable to DoQ Memory Exhaustion via Stream AmplificationEPSS 1.1%CVE-2026-26018HIGHCoreDNS Loop Detection Denial of Service VulnerabilityEPSS 0.8%CVE-2026-32936HIGHCoreDNS DoH GET path missing size validation causes CPU and memory amplificationEPSS 0.7%CVE-2026-32934HIGHCoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of serviceEPSS 0.5%CVE-2026-35579HIGHCoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transportsEPSS 0.4%CVE-2025-68151MEDIUMCoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messagesEPSS 0.4%CVE-2025-58063HIGHCoreDNS: DNS Cache Pinning via etcd Lease ID ConfusionEPSS 0.4%CVE-2026-33489HIGHCoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparisonEPSS 0.4%CVE-2026-33190HIGHCoreDNS TSIG authentication bypass on encrypted DNS transportsEPSS 0.4%CVE-2026-26017HIGHCoreDNS ACL BypassEPSS 0.3%