coredns vulnerabilities (openSUSE)
25 vulnerabilities.
-
corednsopenSUSE HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
corednsopenSUSE Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
corednsopenSUSE gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
corednsopenSUSE OpenTelemetry-Go's baggage parsing no longer caps raw header length 5.3 Medium -
corednsopenSUSE CoreDNS TSIG authentication bypass on encrypted DNS transports 8.7 High -
corednsopenSUSE TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
corednsopenSUSE Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile 7.1 High -
corednsopenSUSE Code execution vulnerability in SWIG code generation in cmd/go 8.8 High -
corednsopenSUSE CoreDNS ACL Bypass 7.7 High -
corednsopenSUSE CoreDNS Loop Detection Denial of Service Vulnerability 7.5 High -
corednsopenSUSE Unexpected session resumption in crypto/tls 10.0 Critical -
corednsopenSUSE Arbitrary file write using cgo pkg-config directive in cmd/go 7.8 High -
corednsopenSUSE Unexpected code execution when invoking toolchain in cmd/go 7.0 High -
corednsopenSUSE Excessive CPU consumption when building archive index in archive/zip 6.5 Medium -
corednsopenSUSE Memory exhaustion in query parameter parsing in net/url 7.5 High -
corednsopenSUSE Apache Log4j Core: Missing TLS hostname verification in Socket appender 6.3 Medium -
corednsopenSUSE Expr has Denial of Service via Unbounded Recursion in Builtin Functions 7.5 High -
corednsopenSUSE CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion 7.1 High -
corednsopenSUSE Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
corednsopenSUSE CoreDNS Cache Poisoning via a birthday attack 7.5 High -
corednsopenSUSE CoreDNS vulnerable to TuDoor Attacks 7.5 High -
corednsopenSUSE Coredns: cd bit response is cached and served later 5.3 Medium -
corednsopenSUSE QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack 7.5 High -
corednsopenSUSE gopkg.in/yaml.v3 Denial of Service 7.5 High -
corednsopenSUSE golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High