Vulnerabilidades em coredns
13 resultadosAnálise Vexday
O CoreDNS apresenta 13 vulnerabilidades catalogadas, com 8 reveladas nos últimos 90 dias, indicando padrão recente de descobertas. Nenhuma vulnerabilidade está sob exploração ativa no cenário de ameaças conhecido, e não há CVEs críticas confirmadas. A fraqueza dominante é alocação excessiva de recursos (CWE-770), típica de ataques de negação de serviço, representando o risco mais relevante para ambientes de produção.
CVE-2025-47950HIGHCoreDNS Vulnerable to DoQ Memory Exhaustion via Stream AmplificationEPSS 1.2%CVE-2026-26018HIGHCoreDNS Loop Detection Denial of Service VulnerabilityEPSS 1.1%CVE-2026-32936HIGHCoreDNS DoH GET path missing size validation causes CPU and memory amplificationEPSS 0.7%CVE-2026-35579HIGHCoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transportsEPSS 0.5%CVE-2026-32934HIGHCoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of serviceEPSS 0.5%CVE-2025-68151MEDIUMCoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messagesEPSS 0.4%CVE-2025-58063HIGHCoreDNS: DNS Cache Pinning via etcd Lease ID ConfusionEPSS 0.4%CVE-2026-33489HIGHCoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparisonEPSS 0.4%CVE-2026-26017HIGHCoreDNS ACL BypassEPSS 0.4%CVE-2026-62309HIGHCoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoSEPSS 0.4%CVE-2026-33190HIGHCoreDNS TSIG authentication bypass on encrypted DNS transportsEPSS 0.4%CVE-2026-62299MEDIUMCoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT recordEPSS 0.3%CVE-2026-62994LOWCoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginEPSS 0.3%