Most recent entries from all

bdu:2025-00341

CLEANSTART-2026-GW29124 — Security fix for CVE-2024-0874 applied in: kubernetes-dns-node-cache-fips 1.26.0-r1

Affected: CleanStart: kubernetes-dns-node-cache-fips

Security vulnerability affects the kubernetes-dns-node-cache-fips package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-323967

fkie_cve-2024-0874

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

GHSA-m9w6-wp3h-vq8g — CoreDNS may return invalid cache entries

Affected: Go: github.com/coredns/coredns

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

gsd-2024-0874

msrc_CVE-2024-0874 — Coredns: cd bit response is cached and served later

msrc_CVE-2024-0874

openSUSE-SU-2024:0319-1 — Security update for coredns

Security update for coredns

RHSA-2024:0041 — Red Hat Security Advisory: OpenShift Container Platform 4.16.0 bug fix and security update

helm: shows secrets with --dry-run option in clear text opentelemetry: DoS vulnerability in otelhttp golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics ssh: Prefix truncation attack on Binary Packet Protocol (BPP) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients coredns: CD bit response is cached and served later quic-go: memory exhaustion attack against QUIC's connection ID mechanism golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm golang: net/mail: comments in display names are incorrectly handled golang: html/template: errors returned from MarshalJSON methods may break template escaping golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON cloudevents/sdk-go: usage of WithRoundTripper to create a Client leaks credentials jose: resource exhaustion jose-go: improper handling of highly compressed data follow-redirects: Possible credential leak webpack-dev-middleware: lack of URL validation may lead to file leak

WID-SEC-W-2024-1030 — CoreDNS: Schwachstelle ermöglicht Manipulation von Daten

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CoreDNS ausnutzen, um Daten zu manipulieren.