PT-2024-12162 · Coredns · Coredns

Xiang Li · Published 2024-09-18 · Updated 2024-09-27 · CVE-2023-28452

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions CoreDNS versions through 1.10.1

Description An issue was discovered in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing denial of service for normal resolution. In an exploit, the attacker could forge a response targeting the source port of a vulnerable resolver without the need to guess the correct TXID.

Recommendations For CoreDNS versions through 1.10.1, update to a version later than 1.10.1 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2023-28452

ECHO-7DF6-6E5E-506B

GHSA-HFMW-7G3M-GJ6Q

GO-2024-3130

OPENSUSE-SU-2024:0319-1

Affected Products

Coredns

References · 19

• https://nvd.nist.gov/vuln/detail/CVE-2023-28452 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:0319-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28452 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-3130 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hfmw-7g3m-gj6q · Vendor Advisory
• https://github.com/coredns/coredns/commit/604a902e2c7e0317aecaa3666124079c75a31573 · Note
• https://github.com/coredns/coredns · Note
• https://suse.com/security/cve/CVE-2024-0874 · Note
• https://github.com/advisories/GHSA-hfmw-7g3m-gj6q · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/2JLUFKCHWHJJ2MQ6XRREF7D4OOWB23V2 · Note
• https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba · Note
• https://t.me/cvenotify/96205 · Telegram Post
• https://twitter.com/CVEnew/status/1836413484990632101 · Twitter Post
• https://suse.com/security/cve/CVE-2023-30464 · Note
• https://suse.com/security/cve/CVE-2023-28452 · Note