MEDIUM5.3
GHSA-m9w6-wp3h-vq8g
CoreDNS may return invalid cache entries
Quick fix
GHSA-m9w6-wp3h-vq8g — github.com/coredns/coredns: upgrade to the fixed version with the command below.
go get github.com/coredns/coredns@v1.11.2Details
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/coredns/coredns
Introduced in:
0Fixed in: 1.11.2Fix
go get github.com/coredns/coredns@v1.11.2References
- https://nvd.nist.gov/vuln/detail/CVE-2024-0874[ADVISORY]
- https://github.com/coredns/coredns/issues/6186[WEB]
- https://github.com/coredns/coredns/pull/6354[WEB]
- https://github.com/coredns/coredns/commit/997c7f953962d47c242273f0e41398fdfb5b0151[WEB]
- https://access.redhat.com/errata/RHSA-2024:0041[WEB]
- https://access.redhat.com/errata/RHSA-2024:4850[WEB]
- https://access.redhat.com/errata/RHSA-2024:6009[WEB]
- https://access.redhat.com/errata/RHSA-2024:6406[WEB]
- https://access.redhat.com/security/cve/CVE-2024-0874[WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=2219234[WEB]
- https://github.com/coredns/coredns[PACKAGE]