PT-2024-10117

CVE-2024-0874

Published

2024-04-25

Updated

2026-10-13

Description by

CVSS 4.0

6.9

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions coredns (affected versions not specified)

Description The issue is related to information disclosure via caching in the coredns DNS server. It could allow a remote attacker to conduct spoofing attacks due to incorrectly implemented caching, leading to invalid cache entries being returned.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Researchers

Govulnbot

Petr Mensik

Vendors

Affected products

Weakness enumeration

CWE-524: Use of Cache Containing Sensitive Information

Related identifiers

CVE-2024-0874

BDU:2025-00341

GHSA-M9W6-WP3H-VQ8G