{"id":"CVE-2024-0874","aliases":["AZL-40201","AZL-40222","EUVD-2024-1245","GHSA-m9w6-wp3h-vq8g","GO-2024-2785","openSUSE-SU-2024:0319-1","openSUSE-SU-2024:13620-1"],"status":"published","title":"Coredns: cd bit response is cached and served later","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0076,"percentile":0.55539,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-524"],"published":"2024-04-25T16:22:44Z","modified":"2026-10-13T03:16:34Z","fixes":[{"ecosystem":"Go","package":"github.com/coredns/coredns","fixed_in":["1.11.2"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:3","package":"coredns","fixed_in":["1.11.1-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"coredns","fixed_in":["1.11.1-8"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/coredns/coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.11.1"},{"fixed":"1.11.2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-8"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/coredns/coredns","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.11.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/coredns/coredns","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.11.2"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3-bp156.4.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3-bp156.4.3.1"}]}],"bundled":6}],"products":[{"vendor":"red hat","product":"logging subsystem for red hat openshift"},{"vendor":"red hat","product":"red hat advanced cluster management for kubernetes 2"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0041","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4850","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6009","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6406","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-0874","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219234","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://github.com/coredns/coredns/issues/6186","tags":["x_transferred","web","report"]},{"url":"https://github.com/coredns/coredns/pull/6354","tags":["x_transferred","web","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0874","tags":["web","advisory"]},{"url":"https://github.com/coredns/coredns/commit/997c7f953962d47c242273f0e41398fdfb5b0151","tags":["web","fix"]},{"url":"https://github.com/advisories/GHSA-m9w6-wp3h-vq8g","tags":["advisory"]},{"url":"https://github.com/coredns/coredns","tags":["package"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2JLUFKCHWHJJ2MQ6XRREF7D4OOWB23V2/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-30464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22189","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-0874","title":"Coredns: cd bit response is cached and served later","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-04-25T16:22:44.182Z","modified":"2026-10-13T02:42:52.805Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-524"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-1245","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-04-25T16:22:44Z","modified":"2026-10-13T02:42:52Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T17:27:21.690828Z"}],"ghsa":[{"id":"GHSA-m9w6-wp3h-vq8g","title":" CoreDNS may return invalid cache entries","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-04-25T18:30:39Z","modified":"2024-09-12T00:31:22Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-524"],"updated_at":"2026-11-02T14:38:02.014847Z"}],"nvd":[{"id":"CVE-2024-0874","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-04-25T17:15:47.083Z","modified":"2026-10-13T03:16:34.627Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-524"],"updated_at":"2026-11-02T14:09:53.50104Z"}],"osv":[{"id":"GHSA-m9w6-wp3h-vq8g","title":" CoreDNS may return invalid cache entries","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-04-25T18:30:39Z","modified":"2026-09-10T03:50:11.357172669Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-524"],"updated_at":"2026-11-02T15:46:51.811331Z"},{"id":"AZL-40201","title":"CVE-2024-0874 affecting package coredns for versions less than 1.11.1-2","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-04-25T17:15:47Z","modified":"2026-04-21T04:54:44.470983Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-40222","title":"CVE-2024-0874 affecting package coredns for versions less than 1.11.1-8","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-04-25T17:15:47Z","modified":"2026-04-21T04:17:33.259357Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"GO-2024-2785","title":"CoreDNS may return invalid cache entries in github.com/coredns/coredns","description":"A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.","status":"published","published":"2024-06-04T15:19:21Z","modified":"2026-02-04T03:15:08.811082Z","updated_at":"2026-11-02T15:47:01.453823Z"},{"id":"openSUSE-SU-2024:0319-1","title":"Security update for coredns","description":"This update for coredns fixes the following issues:\n\nUpdate to version 1.11.3:\n\n  * optimize the performance for high qps (#6767)\n  * bump deps\n  * Fix zone parser error handling (#6680)\n  * Add alternate option to forward plugin (#6681)\n  * fix: plugin/file: return error when parsing the file fails (#6699)\n  * [fix:documentation] Clarify autopath README (#6750)\n  * Fix outdated test (#6747)\n  * Bump go version from 1.21.8 to 1.21.11 (#6755)\n  * Generate zplugin.go correctly with third-party plugins (#6692)\n  * dnstap: uses pointer receiver for small response writer (#6644)\n  * chore: fix function name in comment (#6608)\n  * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)\n- fixes CVE-2023-30464\n- fixes CVE-2023-28452\n\nUpdate to upstream head (git commit #5a52707):\n\n  * bump deps to address security issue CVE-2024-22189\n  * Return RcodeServerFailure when DNS64 has no next plugin (#6590)\n  * add plusserver to adopters (#6565)\n  * Change the log flags to be a variable that can be set prior to calling Run (#6546)\n  * Enable Prometheus native histograms (#6524)\n  * forward: respect context (#6483)\n  * add client labels to k8s plugin metadata (#6475)\n  * fix broken link in webpage (#6488)\n  * Repo controlled Go version (#6526)\n  * removed the mutex locks with atomic bool (#6525)\n\nUpdate to version 1.11.2:\n\n  * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)\n  * plugin/tls: respect the path specified by root plugin (#6138)\n  * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)\n  * fix: make the codeowners link relative (#6397)\n  * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)\n  * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)\n  * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)\n  * Add PITS Global Data Recovery Services as an adopter (#6304)\n  * Handle UDP responses that overflow with TC bit with test case (#6277)\n  * plugin/rewrite: add rcode as a rewrite option (#6204)\n\n- CVE-2024-0874: coredns: CD bit response is cached and served later\n\n- Update to version 1.11.1:\n\n  * Revert “plugin/forward: Continue waiting after receiving malformed responses\n  * plugin/dnstap: add support for “extra” field in payload\n  * plugin/cache: fix keepttl parsing\n\n- Update to version 1.11.0:\n\n  * Adds support for accepting DNS connections over QUIC (doq).\n  * Adds CNAME target rewrites to the rewrite plugin.\n  * Plus many bug fixes, and some security improvements.\n  * This release introduces the following backward incompatible changes:\n   + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta, \n     since all supported K8s versions now use Endpointslice.\n   + The bufsize plugin changed its default size limit value to 1232\n   + Some changes to forward plugin metrics.\n\n- Update to version 1.10.1:\n\n  * Corrected architecture labels in multi-arch image manifest\n  * A new plugin timeouts that allows configuration of server listener timeout durations\n  * acl can drop queries as an action\n  * template supports creating responses with extended DNS errors\n  * New weighted policy in loadbalance\n  * Option to serve original record TTLs from cache\n\n- Update to version 1.10.0:\n\n\t* core: add log listeners for k8s_event plugin (#5451)\n\t* core: log DoH HTTP server error logs in CoreDNS format (#5457)\n\t* core: warn when domain names are not in RFC1035 preferred syntax (#5414)\n\t* plugin/acl: add support for extended DNS errors (#5532)\n\t* plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)\n\t* plugin/cache: add cache disable option (#5540)\n\t* plugin/cache: add metadata for wildcard record responses (#5308)\n\t* plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)\n\t* plugin/cache: correct responses to Authenticated Data requests (#5191)\n\t* plugin/dnstap: add identity and version support for the dnstap plugin (#5555)\n\t* plugin/file: add metadata for wildcard record responses (#5308)\n\t* plugin/forward: enable multiple forward declarations (#5127)\n\t* plugin/forward: health_check needs to normalize a specified domain name (#5543)\n\t* plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)\n\t* plugin/header: add support for query modification (#5556)\n\t* plugin/health: bypass proxy in self health check (#5401)\n\t* plugin/health: don't go lameduck when reloading (#5472)\n\t* plugin/k8s_external: add support for PTR requests (#5435)\n\t* plugin/k8s_external: resolve headless services (#5505)\n\t* plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)\n\t* plugin/ready: reset list of readiness plugins on startup (#5492)\n\t* plugin/rewrite: add PTR records to supported types (#5565)\n\t* plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)\n\t* plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)\n\t* plugin/rewrite: support min and max TTL values (#5508)\n\t* plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)\n\t* plugin/trace: read trace context info from headers for DOH (#5439)\n\t* plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)\n\t* core: update gopkg.in/yaml.v3 to fix CVE-2022-28948 \n\t* core: update golang.org/x/crypto to fix CVE-2022-27191 \n\t* plugin/acl: adding a check to parse out zone info \n\t* plugin/dnstap: support FQDN TCP endpoint \n\t* plugin/errors: add stacktrace option to log a stacktrace during panic recovery \n\t* plugin/template: return SERVFAIL for zone-match regex-no-match case \n","status":"published","published":"2024-09-27T14:01:32Z","modified":"2026-02-04T03:04:36.822102Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:13620-1","title":"coredns-1.11.1-2.1 on GA media","description":"These are all security issues fixed in the coredns-1.11.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:25:19.381369Z","updated_at":"2026-11-02T16:58:36.327643Z"}]}}