coredns.io kayıtları
coredns.io üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-770 Allocation of Resources Without Limits or Throttling3
- CWE-476 NULL Pointer Dereference2
- CWE-290 Authentication Bypass by Spoofing2
- CWE-923 Improper Restriction of Communication Channel to Intended Endpoints2
- CWE-248 Uncaught Exception1
- CWE-400 Uncontrolled Resource Consumption1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-32936İstismar yok | CoreDNS DoH GET path missing size validation causes CPU and memory amplificationcoredns.io · coredns · CWE-400 | Yüksek8,7 | — | %0,6 | 5 May 2026 |
34İzleyin | CVE-2026-32934İstismar yok | CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of servicecoredns.io · coredns · CWE-770 | Yüksek8,7 | — | %0,4 | 5 May 2026 |
34İzleyin | CVE-2026-33190İstismar yok | CoreDNS TSIG authentication bypass on encrypted DNS transportscoredns.io · coredns · CWE-303 | Yüksek8,7 | — | %0,3 | 5 May 2026 |
32İzleyin | CVE-2026-35579İstismar yok | CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transportscoredns.io · coredns · CWE-287 | Yüksek8,2 | — | %0,6 | 5 May 2026 |
32İzleyin | CVE-2026-33489İstismar yok | CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparisoncoredns.io · coredns · CWE-863 | Yüksek8,2 | — | %0,4 | 5 May 2026 |
30İzleyin | CVE-2026-26018İstismar yok | CoreDNS Loop Detection Denial of Service Vulnerabilitycoredns.io · coredns · CWE-337 | Yüksek7,5 | — | %1,2 | 6 Mar 2026 |
30İzleyin | CVE-2025-47950İstismar yok | CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplificationcoredns.io · coredns · CWE-770 | Yüksek7,5 | — | %1,1 | 6 Haz 2025 |
30İzleyin | CVE-2026-62309İstismar yok | CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoScoredns.io · coredns · CWE-476 | Yüksek7,5 | — | %0,6 | 16 Tem 2026 |
30İzleyin | CVE-2023-28452İstismar yok | An issue was discovered in CoreDNS through 1.10.1.coredns.io · coredns · CWE-290 | Yüksek7,5 | — | %0,6 | 18 Eyl 2024 |
30İzleyin | CVE-2023-30464İstismar yok | CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.coredns.io · coredns · CWE-290 | Yüksek7,5 | — | %0,4 | 18 Eyl 2024 |
26İzleyin | CVE-2025-68151İstismar yok | CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messagescoredns.io · coredns · CWE-770 | Orta6,6 | — | %0,4 | 8 Oca 2026 |
25İzleyin | CVE-2026-26017İstismar yok | CoreDNS is a DNS server that chains plugins.coredns.io · coredns · CWE-367 | Orta6,3 | — | %0,4 | 6 Mar 2026 |
24İzleyin | CVE-2022-2837İstismar yok | A flaw was found in coreDNS.coredns.io · coredns · CWE-923 | Orta6,1 | — | %0,3 | 3 Mar 2023 |
21İzleyin | CVE-2026-62299İstismar yok | CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT recordcoredns.io · coredns · CWE-476 | Orta5,3 | — | %0,5 | 16 Tem 2026 |
17İzleyin | CVE-2022-2835İstismar yok | A flaw was found in coreDNS.coredns.io · coredns · CWE-923 | Orta4,4 | — | %0,1 | 3 Mar 2023 |
14İzleyin | CVE-2026-62994İstismar yok | CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugincoredns.io · coredns · CWE-248 | Düşük3,7 | — | %0,4 | 16 Tem 2026 |
- CVE-2026-3293634İzleyin
CoreDNS DoH GET path missing size validation causes CPU and memory amplification
YüksekCVSS 8,7İstismar yokEPSS %0coredns.io · coredns5 May 2026
- CVE-2026-3293434İzleyin
CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service
YüksekCVSS 8,7İstismar yokEPSS %0coredns.io · coredns5 May 2026
- CVE-2026-3319034İzleyin
CoreDNS TSIG authentication bypass on encrypted DNS transports
YüksekCVSS 8,7İstismar yokEPSS %0coredns.io · coredns5 May 2026
- CVE-2026-3557932İzleyin
CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports
YüksekCVSS 8,2İstismar yokEPSS %0coredns.io · coredns5 May 2026
- CVE-2026-3348932İzleyin
CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison
YüksekCVSS 8,2İstismar yokEPSS %0coredns.io · coredns5 May 2026
- CVE-2026-2601830İzleyin
CoreDNS Loop Detection Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1coredns.io · coredns6 Mar 2026
- CVE-2025-4795030İzleyin
CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification
YüksekCVSS 7,5İstismar yokEPSS %1coredns.io · coredns6 Haz 2025
- CVE-2026-6230930İzleyin
CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS
YüksekCVSS 7,5İstismar yokEPSS %0coredns.io · coredns16 Tem 2026
- CVE-2023-2845230İzleyin
An issue was discovered in CoreDNS through 1.10.1.
YüksekCVSS 7,5İstismar yokEPSS %0coredns.io · coredns18 Eyl 2024
- CVE-2023-3046430İzleyin
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.
YüksekCVSS 7,5İstismar yokEPSS %0coredns.io · coredns18 Eyl 2024
- CVE-2025-6815126İzleyin
CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages
OrtaCVSS 6,6İstismar yokEPSS %0coredns.io · coredns8 Oca 2026
- CVE-2026-2601725İzleyin
CoreDNS is a DNS server that chains plugins.
OrtaCVSS 6,3İstismar yokEPSS %0coredns.io · coredns6 Mar 2026
- CVE-2022-283724İzleyin
A flaw was found in coreDNS.
OrtaCVSS 6,1İstismar yokEPSS %0coredns.io · coredns3 Mar 2023
- CVE-2026-6229921İzleyin
CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record
OrtaCVSS 5,3İstismar yokEPSS %0coredns.io · coredns16 Tem 2026
- CVE-2022-283517İzleyin
A flaw was found in coreDNS.
OrtaCVSS 4,4İstismar yokEPSS %0coredns.io · coredns3 Mar 2023
- CVE-2026-6299414İzleyin
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
DüşükCVSS 3,7İstismar yokEPSS %0coredns.io · coredns16 Tem 2026