Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-62309 CoreDNS is a DNS server written in Go

Description

CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is enabled because plugin/pkg/proxyproto/proxyproto.go PacketConn.ReadFrom handles a PROXY v2 header with non-UDP transport such as family byte 0x11, reassigns addr from a nil readFrom result after parseProxyProtocol errors, and calls addr.String() in the warning log before ServeDNS recovery applies. This issue is fixed in version 1.14.4.

Produits et versions touchés

Produit Versions touchées Corrigé en
coredns 1.14 premières → < 1.14.4 1.14.4

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de coredns

Les 15 CVE de coredns →
CVE-2026-86003 CoreDNS is a DNS server written in Go 7.5 Élevée CVE-2026-82399 CoreDNS is a DNS server written in Go 7.5 Élevée CVE-2026-62299 CoreDNS is a DNS server written in Go 5.3 Moyenne CVE-2026-62994 CoreDNS is a DNS server written in Go 3.7 Faible
Suivre cette CVE