LOW3.7
GHSA-h92q-fgpp-qhrq
CoreDNS Cache Poisoning via a birthday attack
Details
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/coredns/coredns
Introduced in:
0No fixed version published yet for github.com/coredns/coredns (go modules). Pin to a known-safe version or switch to an alternative.