CoreDNS.io CoreDNS any version

CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports

CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service

CoreDNS DoH GET path missing size validation causes CPU and memory amplification

CoreDNS TSIG authentication bypass on encrypted DNS transports

CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison

CoreDNS ACL Bypass

CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification

CoreDNS Loop Detection Denial of Service Vulnerability

CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS

An issue was discovered in CoreDNS through 1.10.1. There is a vulnerability in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing denial of service for normal resolution. In an exploit, the attacker could just forge a response targeting the source port of a vulnerable resolver without the need to guess the correct TXID.

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.

A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.

CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record

A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin