CVE-2024-0874

Description

A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching.

Reserved 2024-01-24 | Published 2024-04-25 | Updated 2024-12-30 | Assigner redhat

Problem types

Use of Cache Containing Sensitive Information

Product status

Default status
unaffected

Any version before 1.11.2
affected

Default status
affected

v4.13.0-202408260940.p0.ge70f097.assembly.stream.el8 before *
unaffected

Default status
affected

v4.14.0-202408260910.p0.gfdd6037.assembly.stream.el8 before *
unaffected

Default status
affected

v4.15.0-202407230407.p0.g1326282.assembly.stream.el9 before *
unaffected

Default status
affected

v4.16.0-202406131906.p0.g04d84f7.assembly.stream.el9 before *
unaffected

Default status
unaffected

Default status
affected

Timeline

2023-07-03:	Reported to Red Hat.
2023-07-03:	Made public.

Credits

This issue was discovered by Petr Mensik (Red Hat).

References

access.redhat.com/errata/RHSA-2024:0041 (RHSA-2024:0041) vendor-advisory

access.redhat.com/errata/RHSA-2024:4850 (RHSA-2024:4850) vendor-advisory

access.redhat.com/errata/RHSA-2024:6009 (RHSA-2024:6009) vendor-advisory

access.redhat.com/errata/RHSA-2024:6406 (RHSA-2024:6406) vendor-advisory

access.redhat.com/security/cve/CVE-2024-0874 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2219234 (RHBZ#2219234) issue-tracking

github.com/coredns/coredns/issues/6186

github.com/coredns/coredns/pull/6354

cve.org (CVE-2024-0874)

nvd.nist.gov (CVE-2024-0874)

Download JSON