Описание
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of ..svc.
Пакеты
Наименование
github.com/coredns/coredns
go
Затронутые версииВерсия исправления
<= 1.9.3
Отсутствует
Связанные уязвимости
CVSS3: 4.4
redhat
больше 3 лет назад
A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.
CVSS3: 4.4
nvd
почти 3 года назад
A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.
CVSS3: 4.4
debian
почти 3 года назад
A flaw was found in coreDNS. This flaw allows a malicious user to rero ...