GO-2024-3134

vendorUSosv

CoreDNS Cache Poisoning via a birthday attack in github.com/coredns/coredns

view advisory published 2024-09-25Licence: per source

CoreDNS enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-30464US——
CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan