GO-2026-6507

vendorUSosv

CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

view advisory published 2026-09-28Licence: per source

CoreDNS: Unauthenticated memory exhaustion in custom transports in github.com/coredns/coredns

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-82399US——
CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths in plugin/pkg/doh/doh.go, core/dnsserver…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan